Trojaner-Board - Windows 8: Für mich unbekannter Trojaner von Avira gefunden

Seite 2 von 3

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Windows 8: Für mich unbekannter Trojaner von Avira gefunden (https://www.trojaner-board.de/178572-windows-8-mich-unbekannter-trojaner-avira-gefunden.html)

Chronos5896

11.05.2016 18:02

Oh, mann... Das dachte ich mir schon als Avira sich gemeldet hat .. Naja weiter gehts!

Fixlog

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016

durchgeführt von André (2016-05-11 18:36:58) Run:3

Gestartet von C:\Users\André\Desktop

Geladene Profile: André (Verfügbare Profile: André)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

start

CloseProcesses:

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Run: [lvecl-3] => C:\ProgramData\lvecl-74\lvecl-04.exe [916320 2016-05-11] ()

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\RunOnce: [lvecl-9] => C:\Users\André\AppData\Roaming\lvecl-7\lvecl-7.exe [775680 2016-05-11] ()

C:\ProgramData\lvecl-74

C:\Users\André\AppData\Roaming\lvecl-7

Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pfmea-2.lnk [2016-05-11]

ShortcutTarget: pfmea-2.lnk -> C:\Users\André\AppData\Roaming\pfmea-5\pfmea-09.exe (Keine Datei)

C:\Users\André\AppData\Roaming\pfmea-5

C:\ProgramData\kelvin-2

C:\ProgramData\uum

Reboot:

end

*****************
 

Prozess erfolgreich geschlossen.

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\Software\Microsoft\Windows\CurrentVersion\Run\\lvecl-3 => Wert erfolgreich entfernt

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\lvecl-9 => Wert erfolgreich entfernt

C:\ProgramData\lvecl-74 => erfolgreich verschoben

C:\Users\André\AppData\Roaming\lvecl-7 => erfolgreich verschoben

C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pfmea-2.lnk => erfolgreich verschoben

C:\Users\André\AppData\Roaming\pfmea-5\pfmea-09.exe => nicht gefunden.

"C:\Users\André\AppData\Roaming\pfmea-5" => nicht gefunden.

C:\ProgramData\kelvin-2 => erfolgreich verschoben

C:\ProgramData\uum => erfolgreich verschoben
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 18:36:59 ====

FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016

durchgeführt von André (Administrator) auf ANDRÉ-PC (11-05-2016 18:44:56)

Gestartet von C:\Users\André\Desktop

Geladene Profile: André (Verfügbare Profile: André)

Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Bitsum LLC) C:\Program Files\ParkControl\ParkControl.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Users\André\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2013-11-20] (Hewlett-Packard )

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-20] (IDT, Inc.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2396096 2016-03-30] (NVIDIA Corporation)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [814608 2016-05-10] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-03-18] (Apple Inc.)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-03-30] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [FireStormStartUpAutoRun] => C:\Program Files (x86)\ZotacFireStorm\FireStorm.exe [24278016 2015-03-11] (PC Partner Co.Ltd)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-30] (Valve Corporation)

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Run: [HP Deskjet 3050A J611 series (NET)] => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Run: [Spotify Web Helper] => C:\Users\André\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1525360 2016-04-26] (Spotify Ltd)

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Run: [Spotify] => C:\Users\André\AppData\Roaming\Spotify\Spotify.exe [6890608 2016-04-26] (Spotify Ltd)

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [51662464 2016-04-08] (Skype Technologies S.A.)

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8813784 2016-03-11] (Piriform Ltd)

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [132608 2014-11-21] (Microsoft Corporation)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

Tcpip\..\Interfaces\{9A94A0F4-2D9B-45C3-9E0A-94ED23BCC2BF}: [DhcpNameServer] 192.168.0.1 192.168.0.2
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM -> {E9CF137E-FB25-49C6-A0D0-A0DE744D2C27} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt

SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 

SearchScopes: HKU\S-1-5-21-447048058-3512354665-2473454594-1001 -> DefaultScope {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout

SearchScopes: HKU\S-1-5-21-447048058-3512354665-2473454594-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-02-25] (HP)

BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-11-07] (DVDVideoSoft Ltd.)

BHO-x32: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-19] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-19] (Oracle Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-02-25] (HP)

DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} 

DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.203.0.cab

DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} hxxps://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.96.0.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\x7nutf5z.default-1438960782100

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-16] ()

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [Keine Datei]

FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-12-16] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-16] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [Keine Datei]

FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-19] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-19] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-03-08] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-03-08] (NVIDIA Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-447048058-3512354665-2473454594-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\André\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)

FF Extension: WEB.DE MailCheck - C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\x7nutf5z.default-1438960782100\extensions\mailcheck@web.de [2016-03-18]

FF Extension: FoxyProxy Standard - C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\x7nutf5z.default-1438960782100\Extensions\foxyproxy@eric.h.jung [2016-02-18]

FF Extension: ProxTube - Unblock YouTube - C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\x7nutf5z.default-1438960782100\Extensions\ich@maltegoetz.de.xpi [2016-01-25]

FF Extension: Game Debate PC System Requirement Tool - C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\x7nutf5z.default-1438960782100\Extensions\jid1-E6k1NoroBGfTwA@jetpack.xpi [2016-04-28]

FF Extension: Adblock Plus - C:\Users\André\AppData\Roaming\Mozilla\Firefox\Profiles\x7nutf5z.default-1438960782100\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
 

Chrome: 

=======

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ocbnpbkmjpgbdcgiflkgkpnkinifpgpj] - C:\Users\André\ChromeExtensions\ocbnpbkmjpgbdcgiflkgkpnkinifpgpj\amazon-icon-2.crx <nicht gefunden>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [970656 2016-05-10] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [467016 2016-05-10] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [467016 2016-05-10] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1435704 2016-05-10] (Avira Operations GmbH & Co. KG)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [272304 2016-03-30] (Avira Operations GmbH & Co. KG)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1860616 2016-04-04] ()

R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-03-23] (Digital Wave Ltd.)

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [243984 2016-03-22] (EasyAntiCheat Ltd)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-03-30] (NVIDIA Corporation)

R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26680 2016-02-18] (Hewlett-Packard Company)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-03-30] (NVIDIA Corporation)

S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-26] (Electronic Arts)

R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-03-26] ()

R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-11-20] (IDT, Inc.) [Datei ist nicht signiert]

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2014-03-01] (Advanced Micro Devices, Inc.)

S3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [13209088 2014-07-21] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]

S3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [626688 2014-07-21] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]

S3 athrusb; C:\Windows\system32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)

S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [102912 2015-07-15] (Advanced Micro Devices) [Datei ist nicht signiert]

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128664 2016-03-15] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146712 2016-05-10] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-15] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [78208 2016-05-10] (Avira Operations GmbH & Co. KG)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-03-30] (NVIDIA Corporation)

R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [47672 2016-03-08] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)

S3 USBTINSP; C:\Windows\System32\drivers\tinspusb.sys [142848 2010-03-29] (Texas Instruments)

U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [71680 2014-04-30] (Microsoft Corporation)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

S3 ZDCNDIS6a64; C:\windows\system32\ZDCNDIS6a64.sys [41280 2009-06-26] (Printing Communications Assoc., Inc. (PCAUSA))

S3 ZDCNDIS6a64; C:\windows\SysWOW64\ZDCNDIS6a64.sys [41280 2009-06-26] (Printing Communications Assoc., Inc. (PCAUSA))
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-11 18:37 - 2016-05-11 18:37 - 00000000 ____D C:\ProgramData\uum

2016-05-11 18:13 - 2016-05-11 18:13 - 00104088 _____ C:\Users\André\Downloads\WhatsApp-Image-20160511

2016-05-11 18:07 - 2016-05-11 18:07 - 00045399 _____ C:\Users\André\Desktop\TDSSKiller.rar

2016-05-11 16:01 - 2016-04-11 08:21 - 00074584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys

2016-05-11 16:01 - 2016-04-10 09:48 - 00738096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll

2016-05-11 16:01 - 2016-04-10 09:48 - 00613624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll

2016-05-11 16:01 - 2016-04-10 07:37 - 01549144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-05-11 16:01 - 2016-04-10 06:14 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2016-05-11 16:01 - 2016-04-10 01:29 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2016-05-11 16:01 - 2016-04-10 00:07 - 01097728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2016-05-11 16:01 - 2016-03-16 03:58 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2016-05-11 16:01 - 2016-03-16 03:58 - 00332632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2016-05-11 16:01 - 2016-03-14 18:50 - 00316760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys

2016-05-11 16:01 - 2016-03-12 02:49 - 02466136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2016-05-11 16:01 - 2016-03-12 02:47 - 00160160 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL

2016-05-11 16:01 - 2016-03-12 02:47 - 00121912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL

2016-05-11 16:01 - 2016-03-10 18:55 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll

2016-05-11 16:01 - 2016-03-10 18:52 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2016-05-11 16:01 - 2016-03-10 18:42 - 00413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll

2016-05-11 16:01 - 2016-03-05 19:44 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll

2016-05-11 16:01 - 2016-03-05 19:04 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll

2016-05-11 16:01 - 2016-02-27 20:28 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2016-05-11 16:01 - 2016-02-27 19:57 - 03273728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll

2016-05-11 16:01 - 2016-02-27 19:19 - 03820544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll

2016-05-11 16:01 - 2016-02-27 18:32 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2016-05-11 11:01 - 2016-05-11 11:01 - 130070296 _____ (Microsoft Corporation) C:\Users\André\Downloads\msert(1).exe

2016-05-11 10:54 - 2016-05-11 11:11 - 00120270 _____ C:\Users\André\Desktop\TDSSKiller.txt

2016-05-11 10:52 - 2016-05-11 10:52 - 00000000 _____ C:\Users\André\Desktop\adsada.txt

2016-05-11 10:49 - 2016-05-11 11:10 - 00240630 _____ C:\TDSSKiller.3.1.0.9_11.05.2016_10.49.39_log.txt

2016-05-10 20:28 - 2016-05-11 18:36 - 00001898 _____ C:\Users\André\Desktop\Fixlog.txt

2016-05-10 18:22 - 2016-05-10 18:32 - 00468044 _____ C:\TDSSKiller.3.1.0.9_10.05.2016_18.22.23_log.txt

2016-05-10 17:59 - 2016-05-10 17:59 - 00000560 _____ C:\TDSSKiller.3.1.0.9_10.05.2016_17.59.03_log.txt

2016-05-10 17:58 - 2016-05-10 17:58 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\André\Desktop\tdsskiller.exe

2016-05-10 17:56 - 2016-05-10 17:56 - 02381312 _____ (Farbar) C:\Users\André\Downloads\FRST64(1).exe

2016-05-10 17:42 - 2016-05-10 17:42 - 00000000 ____D C:\ProgramData\AVAST Software

2016-05-10 17:34 - 2016-05-10 17:34 - 05066104 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online.exe

2016-05-10 17:34 - 2016-05-10 17:34 - 05066104 _____ (AVAST Software) C:\Users\André\Downloads\avast_free_antivirus_setup_online.exe

2016-05-10 16:50 - 2016-05-11 17:58 - 00081000 _____ C:\Users\André\Desktop\Addition.txt

2016-05-10 16:49 - 2016-05-11 18:45 - 00021346 _____ C:\Users\André\Desktop\FRST.txt

2016-05-10 16:38 - 2016-05-11 15:00 - 00080908 _____ C:\Users\André\Downloads\Addition.txt

2016-05-10 16:33 - 2016-05-11 15:00 - 00054665 _____ C:\Users\André\Downloads\FRST.txt

2016-05-10 16:32 - 2016-05-11 18:44 - 00000000 ____D C:\FRST

2016-05-10 16:31 - 2016-05-10 16:31 - 02381312 _____ (Farbar) C:\Users\André\Desktop\FRST64.exe

2016-05-10 16:14 - 2016-05-10 16:14 - 00000094 ____H C:\Users\André\Downloads\.~lock.Hurricanes.pptx#

2016-05-10 16:12 - 2016-05-10 16:12 - 00000094 ____H C:\Users\André\Downloads\.~lock.Chemie.pptx#

2016-05-10 15:07 - 2016-05-10 15:07 - 03640384 _____ C:\Users\André\Downloads\adwcleaner_5.116.exe

2016-05-10 14:38 - 2016-05-10 14:39 - 129662736 _____ (Microsoft Corporation) C:\Users\André\Downloads\msert.exe

2016-05-10 14:28 - 2016-05-10 14:28 - 00001116 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2016-05-10 14:20 - 2016-05-10 14:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-05-10 14:20 - 2016-05-10 14:20 - 00002069 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk

2016-05-10 14:17 - 2016-05-10 14:17 - 90330808 _____ (Adobe Systems Incorporated) C:\Users\André\Downloads\AcroRdrDC1501620039_de_DE.exe

2016-05-09 21:41 - 2016-05-09 21:41 - 04489175 _____ C:\Users\André\Downloads\Hurricanes .pptx

2016-05-09 15:51 - 2016-05-09 15:51 - 00212133 _____ C:\Users\André\Desktop\WhatsApp-Image-20160509

2016-05-09 15:50 - 2016-05-09 15:51 - 00212133 _____ C:\Users\André\Downloads\WhatsApp-Image-20160509

2016-05-08 14:07 - 2016-05-08 14:07 - 00000222 _____ C:\Users\André\Desktop\Cosmic DJ.url

2016-05-08 14:07 - 2016-05-08 14:07 - 00000000 ____D C:\Users\André\AppData\LocalLow\GL33k

2016-05-08 12:08 - 2016-05-11 18:42 - 00003050 _____ C:\WINDOWS\System32\Tasks\ParkControl

2016-05-07 23:22 - 2016-05-07 23:22 - 00466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll

2016-05-07 23:22 - 2016-05-07 23:22 - 00444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll

2016-05-07 23:22 - 2016-05-07 23:22 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll

2016-05-07 23:22 - 2016-05-07 23:22 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll

2016-05-07 23:22 - 2016-05-07 23:22 - 00000000 ____D C:\Program Files (x86)\OpenAL

2016-05-06 18:17 - 2016-05-06 18:17 - 00000222 _____ C:\Users\André\Desktop\Hotline Miami 2 Wrong Number.url

2016-05-06 18:17 - 2016-05-06 18:17 - 00000137 _____ C:\Users\André\Desktop\Hotline Miami.url

2016-05-05 02:23 - 2016-05-05 02:23 - 00000000 ____D C:\Users\André\Documents\Overwatch

2016-05-05 01:08 - 2016-05-05 01:08 - 00001114 _____ C:\Users\Public\Desktop\Overwatch.lnk

2016-05-05 01:08 - 2016-05-05 01:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch

2016-05-05 01:00 - 2016-05-10 14:14 - 00000000 ____D C:\Program Files (x86)\Overwatch

2016-05-02 20:13 - 2016-05-02 20:15 - 85367756 _____ C:\Users\André\Downloads\Why Do We Fall - Motivational Video.mp4

2016-05-02 19:19 - 2016-04-30 21:42 - 04483870 _____ C:\Users\André\Desktop\Hurricanes.pptx

2016-05-02 19:14 - 2016-05-02 19:15 - 00477426 _____ C:\Users\André\Downloads\Chemie.pptx

2016-05-02 18:46 - 2016-05-02 18:46 - 00169110 _____ C:\Users\André\Downloads\WhatsApp-Image-20160502

2016-05-02 18:10 - 2016-05-02 18:10 - 00194857 _____ C:\Users\André\Downloads\WhatsApp-Image-20160430

2016-04-30 14:56 - 2016-04-30 14:56 - 00001644 _____ C:\Users\André\Desktop\Neues Textdokument.txt

2016-04-30 12:56 - 2016-04-30 12:56 - 04448793 _____ C:\Users\André\Downloads\Hurricanes.pptx

2016-04-26 20:11 - 2016-04-26 20:11 - 00121060 _____ C:\Users\André\Downloads\Cgco6leh.jpeg

2016-04-25 16:48 - 2016-04-25 16:48 - 00146693 _____ C:\Users\André\Downloads\GlSILUQj.jpeg

2016-04-24 20:55 - 2016-04-24 20:57 - 00000000 ____D C:\Users\André\AppData\Roaming\MediaPurge

2016-04-24 20:55 - 2016-04-24 20:55 - 00001945 _____ C:\Users\André\Desktop\Mediapurge.lnk

2016-04-24 20:55 - 2016-04-24 20:55 - 00000000 ____D C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediapurge

2016-04-24 20:55 - 2016-04-24 20:55 - 00000000 ____D C:\Program Files (x86)\Mediapurge

2016-04-24 20:44 - 2016-04-24 20:44 - 00001259 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2016-04-21 10:01 - 2016-04-23 14:37 - 00000000 ____D C:\driver_memscan

2016-04-16 14:22 - 2016-04-16 14:22 - 00000222 _____ C:\Users\André\Desktop\Call of Duty Black Ops II - Zombies.url

2016-04-16 14:18 - 2016-04-16 14:18 - 00000222 _____ C:\Users\André\Desktop\Call of Duty Black Ops II - Multiplayer.url

2016-04-16 13:56 - 2016-04-16 13:56 - 00000222 _____ C:\Users\André\Desktop\Call of Duty Black Ops II.url

2016-04-14 16:11 - 2016-04-14 16:11 - 00000836 _____ C:\Users\Public\Desktop\CCleaner.lnk

2016-04-14 16:11 - 2016-04-14 16:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2016-04-14 16:07 - 2016-04-14 16:07 - 05683392 _____ (Piriform Ltd) C:\Users\André\Downloads\ccsetup516_slim.exe

2016-04-13 18:45 - 2016-04-13 18:49 - 00000518 _____ C:\Users\André\Documents\Neues Textdokument.txt

2016-04-13 13:58 - 2016-03-31 02:54 - 25817600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-04-13 13:58 - 2016-03-31 02:31 - 02892800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-04-13 13:58 - 2016-03-31 02:25 - 06052352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-04-13 13:58 - 2016-03-31 02:03 - 20352512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-04-13 13:58 - 2016-03-31 01:51 - 02285056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-04-13 13:58 - 2016-03-31 01:43 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2016-04-13 13:58 - 2016-03-31 01:43 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2016-04-13 13:58 - 2016-03-31 01:42 - 02131968 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2016-04-13 13:58 - 2016-03-31 01:39 - 15415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-04-13 13:58 - 2016-03-31 01:30 - 02596864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-04-13 13:58 - 2016-03-31 01:23 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2016-04-13 13:58 - 2016-03-31 01:21 - 13811712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-04-13 13:58 - 2016-02-02 20:16 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys

2016-04-13 13:57 - 2016-03-31 02:28 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2016-04-13 13:57 - 2016-03-31 02:17 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2016-04-13 13:57 - 2016-03-31 01:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2016-04-13 13:57 - 2016-03-31 01:56 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2016-04-13 13:57 - 2016-03-31 01:55 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2016-04-13 13:57 - 2016-03-31 01:53 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2016-04-13 13:57 - 2016-03-31 01:50 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2016-04-13 13:57 - 2016-03-31 01:45 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2016-04-13 13:57 - 2016-03-31 01:45 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2016-04-13 13:57 - 2016-03-31 01:43 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-04-13 13:57 - 2016-03-31 01:30 - 04611072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-04-13 13:57 - 2016-03-31 01:30 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2016-04-13 13:57 - 2016-03-31 01:30 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2016-04-13 13:57 - 2016-03-31 01:27 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2016-04-13 13:57 - 2016-03-31 01:24 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2016-04-13 13:57 - 2016-03-31 01:23 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2016-04-13 13:57 - 2016-03-31 01:23 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-04-13 13:57 - 2016-03-31 01:18 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-04-13 13:57 - 2016-03-31 01:06 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2016-04-13 13:57 - 2016-03-31 01:05 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-04-13 13:57 - 2016-03-31 01:02 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-04-13 13:57 - 2016-03-31 01:00 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2016-04-13 13:56 - 2016-04-04 08:35 - 00046768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-04-13 13:56 - 2016-04-02 15:26 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-04-13 13:56 - 2016-04-02 15:26 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2016-04-13 13:56 - 2016-03-28 15:21 - 00698368 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2016-04-13 13:56 - 2016-03-28 15:21 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2016-04-13 13:56 - 2016-03-28 15:21 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2016-04-13 13:56 - 2016-03-28 15:21 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2016-04-13 13:56 - 2016-03-28 15:21 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-04-13 13:56 - 2016-03-16 01:00 - 00561952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-04-13 13:56 - 2016-03-15 16:14 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-04-13 13:56 - 2016-03-11 16:48 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll

2016-04-13 13:56 - 2016-03-10 20:22 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2016-04-13 13:56 - 2016-03-10 20:21 - 00401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2016-04-13 13:56 - 2016-03-10 20:20 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys

2016-04-13 13:56 - 2016-03-10 19:44 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2016-04-13 13:56 - 2016-03-10 19:16 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2016-04-13 13:56 - 2016-03-10 19:03 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll

2016-04-13 13:56 - 2016-03-10 18:48 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll

2016-04-13 13:56 - 2016-03-03 18:47 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2016-04-13 13:56 - 2016-03-03 18:33 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2016-04-13 13:56 - 2016-03-03 03:39 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2016-04-13 13:56 - 2016-03-03 03:39 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2016-04-13 13:56 - 2016-02-09 03:31 - 22365472 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-04-13 13:56 - 2016-02-09 03:31 - 19794896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-04-13 13:56 - 2016-02-09 03:31 - 02757616 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2016-04-13 13:56 - 2016-02-09 03:31 - 02412576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2016-04-13 13:56 - 2016-02-09 03:31 - 00273264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2016-04-13 13:56 - 2016-02-08 22:55 - 02712576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2016-04-13 13:56 - 2016-02-08 22:15 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll

2016-04-13 13:56 - 2016-02-08 22:02 - 01197056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll

2016-04-13 13:56 - 2016-02-08 21:48 - 12879360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2016-04-13 13:56 - 2016-02-08 21:43 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2016-04-13 13:56 - 2016-02-08 21:40 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll

2016-04-13 13:56 - 2016-02-08 21:39 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll

2016-04-13 13:56 - 2016-02-08 21:37 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll

2016-04-13 13:56 - 2016-02-08 21:35 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2016-04-13 13:56 - 2016-02-08 21:34 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2016-04-13 13:56 - 2016-02-08 21:33 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll

2016-04-13 13:56 - 2016-02-08 20:50 - 03120640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2016-04-13 13:56 - 2016-02-08 19:55 - 02592256 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll

2016-04-13 13:56 - 2016-02-08 19:33 - 01278464 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll

2016-04-13 13:56 - 2016-02-08 19:12 - 14466560 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2016-04-13 13:56 - 2016-02-08 19:02 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2016-04-13 13:56 - 2016-02-08 19:00 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll

2016-04-13 13:56 - 2016-02-08 18:58 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll

2016-04-13 13:56 - 2016-02-08 18:55 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll

2016-04-13 13:56 - 2016-02-08 18:53 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll

2016-04-13 13:56 - 2016-02-08 18:53 - 01348096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-04-13 13:56 - 2016-02-08 18:50 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2016-04-13 13:56 - 2016-02-08 18:50 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2016-04-13 13:56 - 2016-02-08 18:48 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll

2016-04-13 13:56 - 2016-02-08 18:47 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll

2016-04-13 13:56 - 2016-02-08 18:44 - 00955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2016-04-13 13:56 - 2016-02-05 16:46 - 01455104 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe

2016-04-13 13:56 - 2016-02-03 17:14 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys

2016-04-13 13:56 - 2016-02-03 17:11 - 01673728 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll

2016-04-13 13:56 - 2016-02-02 19:51 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll

2016-04-13 13:56 - 2016-02-02 19:19 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll

2016-04-13 13:56 - 2016-02-02 19:15 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll

2016-04-13 13:56 - 2016-02-02 19:01 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll

2016-04-13 13:56 - 2016-02-02 18:51 - 02609152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2016-04-13 13:56 - 2016-02-02 18:48 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll

2016-04-13 13:56 - 2016-02-02 18:46 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll

2016-04-13 13:56 - 2016-02-02 18:41 - 02170880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2016-04-13 13:56 - 2016-02-02 18:39 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll

2016-04-13 13:56 - 2016-01-27 17:18 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2016-04-13 13:56 - 2016-01-26 21:15 - 00072024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys

2016-04-13 13:56 - 2016-01-21 21:35 - 00952928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2016-04-13 13:56 - 2016-01-21 20:42 - 00786152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2016-04-13 13:56 - 2016-01-21 00:40 - 00099672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys

2016-04-13 13:56 - 2014-11-08 04:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2016-04-13 13:56 - 2014-11-08 04:17 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2016-04-13 13:55 - 2016-03-10 21:19 - 07452512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-04-13 13:55 - 2016-03-10 21:17 - 01663192 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2016-04-13 13:55 - 2016-03-10 21:17 - 01523216 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2016-04-13 13:55 - 2016-03-10 21:17 - 01490128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2016-04-13 13:55 - 2016-03-10 21:17 - 01358960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2016-04-13 13:55 - 2016-03-10 21:17 - 01133752 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2016-04-13 13:55 - 2016-03-10 19:48 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2016-04-13 13:55 - 2016-03-10 19:43 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll

2016-04-13 13:55 - 2016-03-10 18:55 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll

2016-04-13 13:55 - 2016-03-10 18:42 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll

2016-04-13 13:55 - 2016-03-03 18:13 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll

2016-04-13 13:55 - 2016-02-07 01:05 - 00551256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2016-04-13 13:55 - 2016-02-05 21:07 - 00378712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2016-04-13 13:55 - 2016-02-05 17:11 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2016-04-13 13:55 - 2016-02-05 17:11 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL

2016-04-13 13:55 - 2016-02-05 17:07 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL

2016-04-13 13:55 - 2016-02-05 17:02 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL

2016-04-13 13:55 - 2016-02-04 20:07 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpsapi.dll

2016-04-13 13:55 - 2016-02-04 19:35 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpsapi.dll

2016-04-13 13:55 - 2016-02-04 18:23 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2016-04-13 13:55 - 2016-02-04 18:22 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2016-04-13 13:55 - 2016-02-02 19:18 - 01574912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe

2016-04-13 13:55 - 2016-01-31 19:17 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeui.exe

2016-04-13 13:55 - 2016-01-22 07:22 - 02487296 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll

2016-04-13 13:55 - 2016-01-22 07:11 - 01482240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-11 18:42 - 2013-02-02 18:30 - 00000000 ____D C:\Program Files (x86)\Steam

2016-05-11 18:41 - 2016-03-18 22:35 - 00000000 ____D C:\ProgramData\NVIDIA

2016-05-11 18:41 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-05-11 18:41 - 2013-08-22 16:44 - 00405368 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-05-11 18:41 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\Inf

2016-05-11 18:30 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-05-11 18:28 - 2013-08-15 12:24 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-05-11 18:28 - 2013-01-03 18:22 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-05-11 18:23 - 2013-01-02 14:08 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-447048058-3512354665-2473454594-1001

2016-05-11 18:12 - 2013-01-03 15:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2016-05-11 17:19 - 2015-02-22 21:08 - 00753152 ___SH C:\Users\André\Downloads\Thumbs.db

2016-05-11 17:17 - 2015-02-01 12:26 - 00601600 ___SH C:\Users\André\Desktop\Thumbs.db

2016-05-11 17:15 - 2015-01-31 22:04 - 00000000 ____D C:\Users\André

2016-05-11 14:55 - 2015-03-13 21:29 - 00000000 ____D C:\Users\André\Downloads\Archives

2016-05-11 14:51 - 2015-02-06 20:43 - 00003930 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E60977FA-3A81-4898-8919-E45EAAFEA251}

2016-05-10 21:20 - 2015-07-29 16:33 - 00000000 ____D C:\Users\André\AppData\Local\Battle.net

2016-05-10 20:59 - 2015-07-29 16:33 - 00000000 ____D C:\Program Files (x86)\Battle.net

2016-05-10 20:28 - 2013-01-11 20:51 - 00000000 ____D C:\Users\André\AppData\LocalLow\Temp

2016-05-10 18:15 - 2016-03-19 15:32 - 00000000 ____D C:\Users\André\AppData\Local\CrashDumps

2016-05-10 18:15 - 2013-05-04 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2016-05-10 18:13 - 2013-05-07 16:01 - 00078208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys

2016-05-10 18:13 - 2013-05-04 10:38 - 00146712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys

2016-05-10 17:36 - 2014-09-24 19:06 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2016-05-10 17:23 - 2013-08-22 15:25 - 01048576 ___SH C:\WINDOWS\system32\config\BBI

2016-05-10 17:17 - 2013-01-03 16:09 - 00000000 ____D C:\Users\André\AppData\Roaming\Skype

2016-05-10 15:50 - 2013-02-18 14:36 - 00007667 _____ C:\Users\André\AppData\Local\resmon.resmoncfg

2016-05-10 15:43 - 2013-11-11 21:04 - 00000000 ____D C:\AdwCleaner

2016-05-10 15:33 - 2014-09-24 19:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2016-05-10 15:33 - 2014-01-06 18:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-05-10 14:28 - 2014-09-24 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2016-05-10 14:21 - 2014-12-29 11:31 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2016-05-10 14:20 - 2013-01-05 14:01 - 00000000 ____D C:\Program Files (x86)\Adobe

2016-05-10 14:20 - 2013-01-03 15:39 - 00000000 ____D C:\ProgramData\Adobe

2016-05-09 21:53 - 2014-11-21 05:35 - 01980998 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-05-09 21:53 - 2014-11-21 04:45 - 00841326 _____ C:\WINDOWS\system32\perfh007.dat

2016-05-09 21:53 - 2014-11-21 04:45 - 00191558 _____ C:\WINDOWS\system32\perfc007.dat

2016-05-09 21:44 - 2013-06-19 16:13 - 00000000 ____D C:\Users\André\AppData\Roaming\TS3Client

2016-05-09 20:47 - 2014-01-13 17:25 - 00000000 ____D C:\Users\André\AppData\Local\DayZ

2016-05-08 20:22 - 2015-10-01 18:48 - 00000000 ____D C:\Users\André\AppData\Roaming\Spotify

2016-05-08 20:17 - 2015-10-09 13:23 - 00000000 ____D C:\Users\André\AppData\Local\Spotify

2016-05-08 19:54 - 2015-04-02 12:38 - 00000000 ____D C:\Users\André\Downloads\Wallpaper

2016-05-08 12:15 - 2015-01-30 20:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-05-07 23:23 - 2013-07-06 14:35 - 00000000 ____D C:\Users\André\Documents\My Games

2016-05-06 14:23 - 2015-08-30 19:09 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX

2016-05-06 14:23 - 2015-08-30 19:09 - 00000000 ___SD C:\WINDOWS\system32\GWX

2016-05-06 14:23 - 2015-02-03 19:00 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-05-05 00:43 - 2016-03-26 00:19 - 00000000 ____D C:\Program Files (x86)\Hearthstone

2016-05-04 21:02 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps

2016-05-04 21:02 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-05-03 03:15 - 2014-11-21 13:01 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-05-03 03:15 - 2014-11-21 13:01 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-05-02 20:31 - 2013-01-12 14:43 - 00000000 ____D C:\Users\André\AppData\Local\ElevatedDiagnostics

2016-04-29 21:41 - 2016-02-18 20:30 - 00000000 ____D C:\Users\André\Documents\CCleaner Reg Backups!

2016-04-29 07:31 - 2015-03-24 14:29 - 00000000 ____D C:\Users\André\Downloads\LUPO

2016-04-29 06:35 - 2013-01-11 20:49 - 00000000 ____D C:\Users\André\AppData\Roaming\DVDVideoSoft

2016-04-27 20:40 - 2014-08-16 14:13 - 00000000 ____D C:\ProgramData\Package Cache

2016-04-27 20:20 - 2013-09-06 14:40 - 00000000 ____D C:\Users\André\AppData\Roaming\OBS

2016-04-26 15:17 - 2016-02-17 15:39 - 00000000 ____D C:\Users\André\AppData\Local\TeamSpeak 3 Client

2016-04-26 13:01 - 2016-01-01 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype

2016-04-26 13:01 - 2013-01-03 16:09 - 00000000 ____D C:\ProgramData\Skype

2016-04-24 20:44 - 2016-03-25 15:57 - 00001416 _____ C:\Users\Public\Desktop\Free YouTube To MP3 Converter.lnk

2016-04-24 20:44 - 2013-08-18 13:28 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2016-04-24 20:44 - 2013-01-11 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2016-04-20 12:35 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache

2016-04-16 21:16 - 2013-01-03 15:41 - 00003766 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2016-04-14 16:20 - 2013-01-02 14:01 - 00000000 ____D C:\Users\André\AppData\Local\Packages

2016-04-14 16:18 - 2012-11-22 11:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-04-14 16:17 - 2013-01-18 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ

2016-04-14 16:17 - 2013-01-18 20:38 - 00000000 ____D C:\Program Files (x86)\THQ

2016-04-14 16:15 - 2013-08-22 17:36 - 00000000 __SHD C:\Program Files\Windows Sidebar

2016-04-14 16:15 - 2013-08-22 17:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar

2016-04-14 16:12 - 2015-03-27 22:10 - 00000000 ____D C:\WINDOWS\Minidump

2016-04-13 20:59 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData

2016-04-13 13:50 - 2016-01-13 13:43 - 00177488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-04-13 13:47 - 2016-03-09 15:30 - 01501488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2016-04-13 13:47 - 2016-03-09 15:30 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll

2016-04-13 13:46 - 2016-03-09 15:30 - 01737080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2014-09-14 19:20 - 2014-09-14 19:20 - 0000297 _____ () C:\Users\André\AppData\Roaming\BreakingPoint_Login.ini

2014-09-14 19:23 - 2014-09-14 19:23 - 0001370 _____ () C:\Users\André\AppData\Roaming\BreakingPoint_Options.ini

2014-02-15 10:22 - 2014-02-15 10:22 - 0000011 _____ () C:\Users\André\AppData\Roaming\Network Meter_Usage.ini

2013-08-21 13:54 - 2013-12-21 14:58 - 0000134 _____ () C:\Users\André\AppData\Roaming\Network Monitor II_Traffic.ini

2013-08-21 13:04 - 2013-08-21 13:04 - 0000725 _____ () C:\Users\André\AppData\Roaming\Ping Monitor_Settings.ini

2014-12-21 15:16 - 2014-12-21 15:16 - 0000000 _____ () C:\Users\André\AppData\Roaming\Stardockfences_debug_snapshot.dat

2014-06-19 18:50 - 2014-06-19 18:50 - 0000024 _____ () C:\Users\André\AppData\Roaming\temp.ini

2013-02-16 16:01 - 2013-02-19 18:05 - 0004608 _____ () C:\Users\André\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2016-03-13 21:16 - 2016-03-13 21:16 - 0007890 _____ () C:\Users\André\AppData\Local\recently-used.xbel

2013-02-18 14:36 - 2016-05-10 15:50 - 0007667 _____ () C:\Users\André\AppData\Local\resmon.resmoncfg

2013-11-25 18:04 - 2013-11-25 18:04 - 0000057 _____ () C:\ProgramData\Ament.ini

2013-01-02 14:02 - 2013-01-02 14:02 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
 

Einige Dateien in TEMP:

====================

C:\Users\André\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-05-11 18:23
 

==================== Ende von FRST.txt ============================

Jaaaa... Die Addition kann ich gerade nicht senden, weil mein PC gerade Windows 10 installiert...

Chronos5896

11.05.2016 19:05

Addition:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016

durchgeführt von André (2016-05-11 18:46:40)

Gestartet von C:\Users\André\Desktop

Windows 8.1 (X64) (2015-01-31 20:32:58)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-447048058-3512354665-2473454594-500 - Administrator - Enabled)

André (S-1-5-21-447048058-3512354665-2473454594-1001 - Administrator - Enabled) => C:\Users\André

Gast (S-1-5-21-447048058-3512354665-2473454594-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-447048058-3512354665-2473454594-1003 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)

Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Arma 3 (HKLM\...\Steam App 107410) (Version:  - Bohemia Interactive)

Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version:  - Ubisoft Montreal)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{3b87484e-d70b-4b4f-ad59-2ae89571e2cf}) (Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{74d1ef14-dd39-4749-b051-e183a1e27f5e}) (Version: 1.1.58.35540 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{ccdc9cfe-8ba7-4c6c-ac5f-b2d6cfa49efc}) (Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG)

Avira Launcher (x32 Version: 1.1.58.35540 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 2(TM) (HKLM-x32\...\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}) (Version:  - )

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Call of Duty: Black Ops II - Multiplayer (HKLM\...\Steam App 202990) (Version:  - Treyarch)

Call of Duty: Black Ops II - Zombies (HKLM\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM\...\Steam App 202970) (Version:  - Treyarch)

Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)

Cosmic DJ (HKLM\...\Steam App 297110) (Version:  - Gl33k)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)

CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4319 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DayZ (HKLM\...\Steam App 221100) (Version:  - Bohemia Interactive)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)

DVDVideoSoftTB DE Toolbar (HKLM-x32\...\DVDVideoSoftTB_DE Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB DE)

Empire Earth II (HKLM-x32\...\{DF315348-721C-40B8-BAE2-58C6C7D935A2}) (Version: 1.02 - Sierra)

Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version:  - Bethesda Game Studios)

Fistful of Frags (HKLM-x32\...\Steam App 265630) (Version:  - Fistful of Frags Team)

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Garry)

GD Hardware Scan (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\GD Hardware Scan) (Version: 00.00.00.01 - Social Web Tech LTD)

Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

Hotline Miami (HKLM\...\Steam App 219150) (Version:  - Dennaton Games)

Hotline Miami 2: Wrong Number (HKLM\...\Steam App 274170) (Version:  - Dennaton Games)

HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)

HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)

HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät (HKLM\...\{61ADDE9C-3AE6-46FC-9127-DFFF637AED03}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Deskjet 3050A J611 series Hilfe (HKLM-x32\...\{97DDCAB8-B770-4089-A10F-67568069D78A}) (Version: 140.0.2.2 - Hewlett Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)

HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.2.8.25 - Hewlett-Packard Company)

HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.2.8.17 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)

iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

LibreOffice 4.0.0.3 (HKLM-x32\...\{8EA569F1-97AF-4C3E-A0CB-4846C2D35A81}) (Version: 4.0.0.3 - The Document Foundation)

Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.74 - Peter Lorenz)

METAL GEAR SOLID V: GROUND ZEROES (HKLM-x32\...\Steam App 311340) (Version:  - Kojima Productions)

METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version:  - Konami Digital Entertainment)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)

Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.2 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 364.51 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.2.55 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.55 - NVIDIA Corporation)

NVIDIA Grafiktreiber 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 364.51 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)

NVIDIA Miracast Virtueller Ton 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 364.51 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)

Oddworld: New 'n' Tasty (HKLM-x32\...\Steam App 314660) (Version:  - Just Add Water (Developments), Ltd.)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

ParkControl (HKLM-x32\...\ParkControl) (Version: 1.0.1.1 - Bitsum)

Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)

PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)

Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

Prezi (HKLM-x32\...\{63B8F931-2BF3-4D5D-9C28-E2EF88D83DFD}) (Version: 5.2.8 - Ihr Firmenname)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)

Rust (HKLM\...\Steam App 252490) (Version:  - Facepunch Studios)

Savant - Ascent (HKLM-x32\...\Steam App 259530) (Version:  - DPad Studios)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.2.55 - NVIDIA Corporation) Hidden

Shovel Knight (HKLM-x32\...\Steam App 250760) (Version:  - Yacht Club Games)

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

Spelunky (HKLM-x32\...\Steam App 239350) (Version:  - )

Splinter Cell Pandora Tomorrow (HKLM-x32\...\{084A9731-D05B-4ADA-B4A0-0ADD25FD7152}) (Version: 1.00.000 - )

Spore (HKLM-x32\...\Steam App 17390) (Version:  - Maxis™)

Spore: Creepy & Cute Parts Pack (HKLM-x32\...\Steam App 17440) (Version:  - Maxis™)

Spore: Galactic Adventures (HKLM-x32\...\Steam App 24720) (Version:  - EA - Maxis)

Spotify (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)

Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)

Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)

Studie zur Verbesserung von HP Deskjet 3050A J611 series Produkten (HKLM\...\{EF27865C-E636-47C4-8B35-CE8A88045681}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)

The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)

The Culling (HKLM\...\Steam App 437220) (Version:  - Xaviant)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts)

TI xHCI Filter Driver 1.0.0.4 (HKLM-x32\...\TI xHCI Filter Driver) (Version: 1.0.0.4 - Texas Instruments Inc.)

TI-Nspire™ Computer Link (HKLM-x32\...\{6C5AC088-3136-4043-8985-8B0772A9580E}) (Version: 3.9.0.455 - Texas Instruments Inc.)

Titan Quest (HKLM-x32\...\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}) (Version: 1.00.0000 - Iron Lore)

Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version:  - Ubisoft Montreal)

Tom Clancy's Splinter Cell (HKLM-x32\...\{A174402A-2EE6-4B86-A930-7BC85A9933BD}) (Version: 1.00.000 - )

Tom Clancy's Splinter Cell Chaos Theory (HKLM-x32\...\{888DD888-82BE-4D85-BCB2-2E042CD3E844}) (Version: 1.05.157 - Ubisoft)

Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft)

Torchlight (HKLM-x32\...\{4F64A46D-67F7-4497-AEA2-313D4305A5F6}) (Version: 1.0.0 - JoWooD)

Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)

UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)

UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden

Unity Web Player (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS)

Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft)

VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)

Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)

Warface Launcher (Beta) (HKLM-x32\...\{28D1723C-31C4-4A83-9799-DFFB3739026D}) (Version: 1.0.0 - Crytek GmbH)

WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)

WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

Xfire (remove only) (HKLM-x32\...\Xfire) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-447048058-3512354665-2473454594-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {07B1D83F-8BE6-4268-AC95-5B99EDED3305} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {1134DC2D-A6A0-4857-8DFB-4E0F493CAD27} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)

Task: {1932CDB8-78FE-4534-B812-FD8C0E38BD56} - System32\Tasks\ParkControl => C:\Program Files\ParkControl\ParkControl.exe [2015-12-19] (Bitsum LLC)

Task: {209E117D-060D-4095-8226-DA5E1595625F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-05-11] (Microsoft Corporation)

Task: {3580C528-E0CC-4735-86E3-63A0B8BCC508} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)

Task: {47FBDEF3-2941-4F4E-B108-6C180438BAE8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {49C98BDB-BD1D-44D9-96D6-A9FD5A0AA4AA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-04-06] (Hewlett-Packard)

Task: {4F62D898-94B2-44CA-967B-B256E3AA2E0F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-03-07] (Hewlett-Packard)

Task: {515A7EF6-E89A-4707-835F-F8036BCBB02A} - System32\Tasks\Microsoft\Windows\Setup\gwx\rundetector => C:\Windows\system32\GWX\GWXDetector.exe [2016-04-26] (Microsoft Corporation)

Task: {6F39FF7F-B3BA-4B3A-A5AB-3A23DF5DAB64} - System32\Tasks\ScanToPCActivationApp.exe_{1848EEB4-045A-492D-97B5-A1ABDF8FFF51} => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {92B2AB27-9A52-4CB1-8134-B402BA47CF27} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {9D530CB6-040B-44AE-9475-D09A3FB7A7AC} - System32\Tasks\AdobeFlashPlayerUpdate => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {9DC3DA29-DD1B-43FF-AE81-EAAF2E7E2D03} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-16] (Adobe Systems Incorporated)

Task: {A5222A0D-D798-4B9B-AB9E-7AE2C8386DCC} - System32\Tasks\{4E94E5CB-7B80-4D4F-9653-5B045DBB0562} => pcalua.exe -a "C:\Users\André\Desktop\Slender\Slender - The Eight Pages.exe" -d C:\Users\André\Desktop\Slender

Task: {CE8DAAA5-D76A-4FA8-9C91-D49F86D10B9A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {D019B7C6-F960-47C3-90A7-9C8E4C03031F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)

Task: {D36339C6-3F6E-4807-AD00-0BB992F63485} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {D506C41B-B7C3-473F-B43A-792AF9162E0D} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe

Task: {D66487DC-8EB8-41B7-8AB1-DB26B7F97C86} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

Task: {FDD4D2D1-CB44-4FBA-B4E2-759CB8AA2E0C} - System32\Tasks\Game_Booster_Startup => C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\HP Deskjet 3050A J611 series.exe_{ADEB0F8D-477A-423E-88C7-3805843D3C4B}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HP Deskjet 3050A J611 series.exeĖ-install -prfn HP Deskjet 3050A J611 series (Netzwerk) -ePCUrl hxxps:/h30495.www3.hp.com

Task: C:\WINDOWS\Tasks\HPCustPartic.exe_{490607ED-986D-40BF-BE2C-16BB55AA064D}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPCustPartic.exe

Task: C:\WINDOWS\Tasks\ScanToPCActivationApp.exe_{E224E030-DCCD-4312-8F4E-8929E6A12B66}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe

Task: C:\WINDOWS\Tasks\Toolbox.exe_{69C0F34C-8CBD-4512-B13B-F24BE0CC5553}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\Toolbox.exe

Task: C:\WINDOWS\Tasks\XboxStatTask.job => C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-03-18 22:35 - 2016-03-08 08:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-03-18 22:37 - 2016-03-30 03:21 - 00366528 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-03-18 22:36 - 2016-03-30 03:21 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-04-01 13:38 - 2016-03-30 03:21 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-03-18 22:37 - 2016-03-30 03:22 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2013-01-03 19:54 - 2015-03-26 21:23 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe

2016-04-01 13:38 - 2016-03-30 03:21 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-04-01 13:38 - 2016-03-30 03:21 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-04-01 13:38 - 2016-03-30 03:22 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-18 22:37 - 2016-03-30 03:22 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-04-01 13:38 - 2016-03-30 03:20 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-04-01 13:38 - 2016-03-30 03:20 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-03-11 22:49 - 2016-03-11 22:49 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll

2016-03-18 22:36 - 2016-03-30 03:28 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2013-03-12 18:10 - 2016-04-29 22:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll

2014-05-23 14:15 - 2016-04-30 02:10 - 02549840 _____ () C:\Program Files (x86)\Steam\video.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2013-02-02 18:37 - 2016-04-30 02:10 - 00829008 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2016-03-09 15:02 - 2016-02-18 00:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll

2013-02-02 18:37 - 2016-04-28 03:00 - 49825056 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2012-11-22 11:38 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\André\Downloads\Wallpaper\wallhaven-156813.jpg

DNS Servers: 192.168.0.1 - 192.168.0.2

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AMD External Events Utility => 2

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: Origin Client Service => 3

MSCONFIG\Services: WeGameClientService => 2

HKLM\...\StartupApproved\StartupFolder: => "Speedport W 101 WLAN Manager.lnk"

HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"

HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"

HKLM\...\StartupApproved\Run: => "XboxStat"

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "BingDesktop"

HKLM\...\StartupApproved\Run32: => "HP Software Update"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "BF2Hub Client"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Xfire.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Steam.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "SUPERAntiSpyware"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "GUDelayStartup"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify Web Helper"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{2F81C9A0-7BBE-4D71-8051-29AB84EE6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{9DE8F934-ADAD-4318-880A-BA8C00675792}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{525FF56F-BD8E-4FF1-AC06-78A70ED5832D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [{40D1C4D5-5783-45CE-B50D-2EEC03C7C17A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [UDP Query User{C90CE360-557C-4657-B704-20F529B34C8E}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [TCP Query User{D4F0CF27-9B16-40CA-B125-178FA527F955}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{A3195EE6-31BB-4692-B88C-0E8C843A9BF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [{06EA1C1B-FFA2-492D-8A33-9B57E002C990}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [{E1EB2855-1798-4EDE-8B3B-82F5861378C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{FE4BB57F-B9C3-4B90-9532-3E31FAD1EC69}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{557AFC36-E381-4CA4-AEE1-AC9E8DABCAF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{31EE1A19-89CE-40CC-9182-EF6F2780E78D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{FC0B2104-7D49-442C-97B7-677F51721FFA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{03DEC87D-CCA7-47CD-9190-805E58AD02C6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{0B154B0F-E8BF-4E10-9AFB-602ACE45A389}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{EA882129-9F6E-47F3-B8A1-B714FAC38BB0}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{BDB3192D-E7E9-413A-9396-70B3873A65C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{9C5C6319-4BD7-4958-AF85-0390C636FE26}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{0344D2C1-5B07-4B6F-9100-DC8397B20E52}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{6060FB65-6E8E-42FF-B1B8-775DECDC7404}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{14ABDB4B-012F-4764-A146-87C57D507349}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{3ECB7973-9619-405E-A6BE-1388AE65C0B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{E3578200-F99C-4118-8086-3D55D018DEBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{77A50C45-2191-4923-814A-6E2BA8B0A02E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{D35C7CB8-288E-4C90-B301-D96FD6B4F1C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{654C398B-5DF4-4B24-B2E4-377168A393CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{355A24CE-660C-4E0D-B3CF-5F9A3A64C921}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{22118AC4-2C6C-4A21-98E3-22CFE6EF30C1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{F1B9229F-40C8-4BF7-8D09-07764066B3BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{2673C359-B53B-40E4-9129-0E366B225601}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{19FCCC1D-B026-4BE5-9F5E-A60048284120}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{2F8C6559-20EB-4C1C-A37B-B5B2985E543D}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{31DF9A60-1465-4A7A-B93D-7EFBCDCFFCF2}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{3887276F-6885-4E22-9F4B-3ABC201D6449}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{D4C2095B-7F89-4922-B8C4-B8827F84A2DB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{D0268C2D-602B-4546-BA83-BB6BABE79EDF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{2CA630FB-839D-40DB-9F36-228B7F224361}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{AF7CEDE2-2D7E-4353-8884-1C2491D82A4C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [UDP Query User{AB62C390-516F-4D0D-9FA3-691F9B6D52D2}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [TCP Query User{61338F15-C415-4289-88E5-E4D1456EF082}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{AE67764D-BD85-405D-909A-B40D6A2D364B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{A05353E0-15C5-4636-91E5-3EC3DB7A9298}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{74FD4306-F4CE-4F02-AA0A-66FABFAF2526}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{D8D25627-2D6B-416C-A1B7-F15DB81C4CC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [UDP Query User{60F2F817-AD57-4421-9452-9459338C4CB0}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [TCP Query User{04AD78F5-1C42-4AC3-8B08-0F992D282CA5}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [UDP Query User{6484B4C8-1523-4FEA-896C-6D9D95068AA8}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [TCP Query User{510AED7B-4C10-43DD-9E41-C64994BFEC9E}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [{10B45A3C-510B-49D0-B8E9-18C5B443BB7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{DC6B5AFF-687B-42F4-B773-5B4C844B8A0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{937343C7-994B-47F9-A316-66587B212F11}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{1A3EF871-27E4-4CBC-B74B-B2383F0DFFF9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{E54F4129-E34D-4242-B28A-3934E7456BA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{DA5F7BAC-034D-4514-AB1E-3A8F49EC98FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{4CCB3275-446A-4A5E-984B-E661A5906CE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{3B2F061E-9DEE-4A60-BB66-553D949A1CE8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{16766F7A-84A3-47D2-BB13-C739A79A6BC4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{F4AD3048-6EC2-4C89-9AE4-3079E222A515}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{4C19DB87-1819-4DEC-A423-C5D30DED153C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{B76F0C57-6BE2-41BA-8FDC-D600A548733A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [UDP Query User{C7B0AA1C-B270-46B5-A6DD-E789B6CF0316}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [TCP Query User{434FF7C0-9231-4B8F-98BD-4272CB9EA40F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{4368F7BC-2A7C-4AF9-AB66-A7C6C67449E8}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{CA39CCB2-445B-4394-977C-B740672B0350}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [{D5C94B11-2437-48C8-A43B-1EBADF3BE765}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [{A878638D-E967-4491-BF24-9D823CEE97A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [{B04BA630-71E3-48BB-A53D-43E9B3AD9A5F}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [{4E37412E-E309-4DA4-84C7-61826D930253}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe

FirewallRules: [{BE7C4B8C-D22C-4D39-8769-D7D17B52C432}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\DeviceSetup.exe

FirewallRules: [{81FA855D-D76B-4447-984C-FD3599D90623}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{67C1EB95-DE28-4F2B-9058-7B3A2C72D823}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [UDP Query User{816344A6-B7AA-436A-BAF9-ED24DFB232A6}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [TCP Query User{FCADCA24-8865-4D9D-A358-492C0B930FD7}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [{CC9108CA-CAB2-488E-8173-A09E6DBEFB19}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{6E596561-2567-4AA7-8292-2F13D08053FD}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{E211D57C-F8D2-4000-8717-F6EB9BFED9C1}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{89D923D0-52AD-45D3-AB79-2B2FCFA7EEC9}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [UDP Query User{20BC6940-EC8A-4D84-ADA8-0CAC1583C908}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{5B108050-331D-4078-91F7-333C2FD058F0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{F7029719-F975-4165-B9DE-4B50E21FBD96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [{552360C1-3E4D-4478-B81A-743E57C60ADE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [UDP Query User{1AF00546-D969-4B95-BCE1-20AD60109548}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [TCP Query User{2DED59E3-BCD4-4AD1-A751-69C0D993C9C0}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [{E167F28F-3CDB-4E9C-BC93-54BA1A2C3C01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{866386DB-549E-451B-8B08-324399D57293}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{84D5A424-B0E1-48B8-99F7-56DB8A7D831D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{B320A94D-2C0A-40BC-A57E-B8FF09548745}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{3D8FCAA0-AF8A-4080-B76E-91B00EEF2A12}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{4A5D0F96-864C-488C-A3DE-31A996CDA638}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [UDP Query User{7A239781-B79A-4B27-92BB-D85A772CDE98}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [TCP Query User{7061FBA7-108A-4A04-A3F1-0C3A4259C982}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{11A23F99-555C-444F-857D-496287B9A48F}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [TCP Query User{BA0ECDB6-A448-4439-A0A6-374398724581}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [UDP Query User{2AD03E61-6CB6-4DB2-A353-217D91DEBB80}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [TCP Query User{0A63AFDA-95CA-4F6C-8E66-D7A04EF5F6CA}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{854A33A6-B57B-49A4-BC0B-B447864978E7}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [TCP Query User{3D45854F-3635-4D6A-ADF4-0EBEE2575081}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{979C4E21-D9C4-49F4-BCE0-EF5DA3644EDE}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{2C72D711-F6FE-41A5-8E01-8BD6424A81C9}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{F7667282-18D2-4EEC-845E-3B3BCA6702EA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{DC7BF070-51A4-41A4-B1FB-F05B12A05E32}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [TCP Query User{B9B504D2-0BED-44C8-87A1-B03F9A25CB3D}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [{88C338FE-13BA-49E4-B938-296AEF29807B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{4EEC4502-D631-42C4-8990-017FBDE70B5A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{CFC7DE7C-9FD1-46FC-86B0-78C26A9B7775}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{47442B8F-1B8A-4BF4-98E7-5A4025AA9F33}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{8E386419-8F65-43C5-A842-65EC79A74C5E}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{0FEB2ABB-96A2-4F9B-B5DF-352080B000A0}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [UDP Query User{A73EB24B-5760-406C-92F6-01680BFD0E17}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{ABC0EAEB-F6E3-42D6-A4AF-E4698720895E}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{615E09E1-58DF-4F2B-9001-EC72C28F1ED4}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [TCP Query User{199F5DA8-537B-4802-A081-BCC0BDCA4D49}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [{84A117B9-6229-4B07-AA4C-592C006DAF17}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [{F547011A-F4A2-4823-9514-BFBC0F04DF47}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [UDP Query User{1F14F8E7-EF0B-4C0D-A2DC-7D79E56FCD90}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [TCP Query User{843B521A-F575-49BB-A5E6-A8BAF3F39FDB}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [{0B44211B-1D40-4E7E-B060-6CA1F81528A3}] => (Allow) LPort=1900

FirewallRules: [{CE1660CA-ECA5-44DE-A94C-25D5ADC5A300}] => (Allow) LPort=2869

FirewallRules: [{E1FD84FD-A7D8-4832-9B25-FBFC9302E2EA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{2060FED0-2274-4EAA-BF88-879831BB9D71}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{35E64E04-DDCC-40A5-B7DF-DC924212030D}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [TCP Query User{7A28D840-1BC8-4A6B-8A79-EFF25E28477E}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{EDD83D34-D790-4F04-AF0B-12A09F8A5F6B}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{6C8D7433-1032-4924-92EE-E231B2C60069}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [{080B0641-9913-418C-83AF-B418D6421F3E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [{4A0EF7F6-2123-422C-9B03-E67434EC229A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [{863BA61A-4FEF-4D22-B6F7-2A6A445CD55D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [TCP Query User{EE59E25E-E681-4F6D-AF72-AD2A1F391D43}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{F7147E30-BE04-4702-BB59-3CF913696D06}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{7366368D-2C3F-4C0C-94C9-79291994E5EF}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{8A83C40E-4BAC-4B5E-A74D-221CCD63CF3D}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{B0603A95-9371-4DDE-873B-3E9B50060C5E}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [{0D170153-EA06-42AA-9A18-94CF56EC2C1D}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [TCP Query User{5F2D22DE-18CE-4B5B-A2A4-AE30C787FF0F}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [UDP Query User{042AC962-6FD7-4955-A24A-518DF58804BB}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [{82DD64BA-BE73-4A59-BC83-D0CBCAD11B33}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{44407D7A-EA04-4913-90A4-F6270C3E8934}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{D5E03025-EB0F-4A7C-BB33-A3F9DD115AE6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{D9D485A7-E593-4F69-8763-71B6B32FA889}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [TCP Query User{18EBDBB0-6F97-4DBD-9FE2-E95D002547EA}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [UDP Query User{73446A00-A12F-4119-8470-7F8545100C5C}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [{148BD9DE-CE7B-495B-808D-4493B12374BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{74E5C093-E8B3-43AF-B873-FF22E5D9C20D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{83BA189A-2359-4DF2-9B85-4243C11527B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{B3852A97-3C8C-4718-9B64-A8BDCA0A2E5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{75D3D7EE-8634-44FC-9B6D-398DBD05BDDC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [{55B707B7-0D91-4B83-BD64-3B43BC35E5C3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [TCP Query User{3FA714E6-27A8-4C83-A83D-3F14708C7522}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [UDP Query User{4B650623-F185-4E8F-B32C-923681610894}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [{3FB0EED4-4D83-4864-8256-1112E438528A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [{5EBD8610-3469-4A9A-B763-93442B6B1E9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [{10F8A69D-4A78-43DE-A010-A8D58C912584}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{CCC81A88-F96B-482F-A763-63A8BC4FBABD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{04A68A81-678E-4E08-A891-118BF8A82A13}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{5601EF96-3EE6-4AC2-8E5C-9B3C70F1E055}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{F900103E-5B80-4ECD-88B4-7F921E7982DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{03192198-3130-4974-96A8-59765F30ABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{07E757A0-BEA6-4D39-BA47-1322E5A4F972}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{AA00C280-76B2-4D38-A4EA-F40C474FE62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [TCP Query User{80A3FF00-1CE5-40FA-BD74-CDF7B1FEE7A5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [UDP Query User{A24F1D35-3B16-4FC8-AE35-EFD7D74302B5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [TCP Query User{04AEA058-464E-45DC-9F12-93012201A387}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [UDP Query User{BE617A23-6191-4E1B-A1CE-EF5C38152015}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [TCP Query User{B5EF835B-497F-41DE-BC00-7BF39F3DBAB2}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [UDP Query User{87D57B25-B389-4873-99F1-F1F4B56DB10E}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{009D5093-8B1A-47ED-B2D1-75DCD3A253AF}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{8B7F0374-A4DB-4F25-96A9-11C334A778A5}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [{68241CF8-3F67-4606-9CD6-9B44629D1FA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{371DDF5E-863C-4B04-AA36-9BCA8957ABAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B3852398-F898-4F6F-A736-001671E9D853}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{2F46FAC5-39DA-48CB-87B7-2DB63DF9CC9B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{57EA8011-8988-497E-84D0-F9502DB2A1CA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{11C55929-3DB5-4FFF-8D23-A6A63911510C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{5A8CFE7B-899A-4490-BA84-3F58FA2E8F38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{0464378F-CD97-4216-A966-760782823490}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [TCP Query User{35496E53-0B61-408F-8762-039BB5C1035C}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [UDP Query User{2E6E8688-E1C8-47E6-B2D9-7E594F859EA7}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [{9522C61C-0FA5-42CF-99A6-8796BC8ABBB3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [{E25BCE61-2553-4378-B9C8-32AA3DE4414B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [{FABC240F-274B-47AC-858F-438E14DB95F9}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe

FirewallRules: [TCP Query User{6A11780A-C673-4C25-B63A-2AC4A906E120}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [UDP Query User{FEBEFACE-4396-49C6-91E1-33AFCF378EB8}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{8E73AB31-C8AD-4F78-AEBF-565629D44666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [{2330A750-582C-4E3D-8E02-56F0FA5E1800}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [{7A629A0A-1D85-462A-8131-C0F1A0FED8BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{569AB28B-79DA-4152-98C7-8FC358FC16A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{56C07A57-BFA5-470E-8B65-52E04CA6E40E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{BDCC194D-ABA9-4892-B891-FCC35B720DD7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{55449DDA-7F51-4C61-8861-B3C700B4A81F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{B2D89EFE-0FB9-4756-9144-21CFA0AA27BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{44F22EFC-FB2D-4E4D-B1A1-3A9C31E2D3A6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{4B96DCC9-61BA-4747-8A57-9B0DEC5D083A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{1274CD60-E8E4-469D-9A12-04443BFCBAF8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{F0065602-B604-471B-AF08-8447902B5DA3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{262C47AA-404B-48BA-8D26-F495E5069386}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{410F82CB-A332-4660-91D6-53EC5F42E57D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{AFFB53C2-13B6-4304-A294-3BB329BD7A32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [TCP Query User{5CC79050-2FF6-4A33-8DA8-E4C465A2A3DE}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [UDP Query User{4765706F-B3BB-43A0-B242-0A13CE229922}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [{637479C3-5E89-4FAC-8365-DDD65B257ED8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [{EC6C7D2A-4B98-43D4-A98D-A5F23E492F17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [{874A6590-5815-43EC-B566-7CBEB1912029}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [TCP Query User{F6A32B85-6372-45E2-92B3-0AFC0691F1B7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [UDP Query User{99098603-601D-4775-9C3F-BEC0C8D673D8}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [{5B9E721E-7C91-4AFB-8D54-F23B323D8D38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{3AF93217-33B9-474C-8F86-6DA2552DA48D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{B0ACEF2B-4DBF-4D2D-81F2-89919DADDAE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{2DADFF23-7A32-40C7-97D3-74EBF26FC353}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{D904EB1D-3CF6-4D18-ABAD-152EC199EABB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{61D4255A-0725-4A20-86E9-A34E748B4F71}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{9211B61F-6AB9-436E-AE60-FB5D52BFC6F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{34F5F4C6-599F-4D22-A403-1FEFEB04F774}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{E43876E3-8A49-45C9-A1BE-FD30D5F51304}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{7D629C6C-2852-4C13-AE7C-C6E7D0F14E6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{4E5CBD26-E8EA-4812-9703-902E1871A0D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [{7040C603-3913-4BA6-BD1E-E937BD819C14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [TCP Query User{4C1C0507-D001-4114-820D-F8D2A26F0901}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [UDP Query User{559A0FF3-0735-4B3A-A8DC-D372E4F2896F}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [{4B42444C-39EC-4DE6-93C4-F37658C012D4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [{0EEDE53D-E7BD-4BFE-8190-8761E301FC43}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [{22E36B34-93CD-4B4F-A5FB-5AFFD7F9217C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{B9204EB4-20CE-4AA5-8A1A-9324E6806329}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{58307D7D-485E-456D-8D40-11B231A2D5F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{305A4E45-3FEB-4293-B381-B5077FD9A4ED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{9CF03B3A-02D5-46EC-847C-B86C6D0FD8C8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{832A744E-84A5-4E7D-96D3-870816E7DCF5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{D648AC97-D9B3-4592-83CB-88595C433201}] => (Allow) LPort=53000

FirewallRules: [{29C01AA2-C6A0-405B-9A4A-F40C33D0F22B}] => (Allow) LPort=52000
 

==================== Wiederherstellungspunkte =========================
 

11-05-2016 18:24:05 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/11/2016 02:59:18 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm FRST64(1).exe, Version 9.5.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1c74
 

Startzeit: 01d1ab84b3f55f5e
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Users\André\Downloads\FRST64(1).exe
 

Berichts-ID: 21af9b2c-1778-11e6-bf76-b4b52fc7b10a
 

Vollständiger Name des fehlerhaften Pakets: 
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (05/10/2016 07:38:28 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: avscan.exe, Version: 15.0.17.264, Zeitstempel: 0x56f29038

Name des fehlerhaften Moduls: AVSCPLR.DLL, Version: 15.0.17.264, Zeitstempel: 0x56f28832

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000638b

ID des fehlerhaften Prozesses: 0x78c

Startzeit der fehlerhaften Anwendung: 0xavscan.exe0

Pfad der fehlerhaften Anwendung: avscan.exe1

Pfad des fehlerhaften Moduls: avscan.exe2

Berichtskennung: avscan.exe3

Vollständiger Name des fehlerhaften Pakets: avscan.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: avscan.exe5
 

Error: (05/10/2016 06:15:37 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: avcenter.exe, Version: 15.0.17.264, Zeitstempel: 0x56f28f71

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000

ID des fehlerhaften Prozesses: 0x17a4

Startzeit der fehlerhaften Anwendung: 0xavcenter.exe0

Pfad der fehlerhaften Anwendung: avcenter.exe1

Pfad des fehlerhaften Moduls: avcenter.exe2

Berichtskennung: avcenter.exe3

Vollständiger Name des fehlerhaften Pakets: avcenter.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: avcenter.exe5
 

Error: (05/10/2016 05:25:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: avscan.exe, Version: 15.0.16.276, Zeitstempel: 0x56c489d7

Name des fehlerhaften Moduls: AVSCPLR.DLL, Version: 15.0.16.280, Zeitstempel: 0x56c6e004

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000649b

ID des fehlerhaften Prozesses: 0x790

Startzeit der fehlerhaften Anwendung: 0xavscan.exe0

Pfad der fehlerhaften Anwendung: avscan.exe1

Pfad des fehlerhaften Moduls: avscan.exe2

Berichtskennung: avscan.exe3

Vollständiger Name des fehlerhaften Pakets: avscan.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: avscan.exe5
 

Error: (05/10/2016 04:15:03 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm soffice.bin, Version 4.0.0.103 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 134
 

Startzeit: 01d1aac5e6629c16
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files (x86)\LibreOffice 4.0\program\soffice.bin
 

Berichts-ID: 905d7871-16b9-11e6-bf73-b4b52fc7b10a
 

Vollständiger Name des fehlerhaften Pakets: 
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (05/10/2016 03:54:16 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm wwahost.exe, Version 6.3.9600.17415 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1c18
 

Startzeit: 01d1aac2ba88ef09
 

Endzeit: 4294967295
 

Anwendungspfad: C:\WINDOWS\syswow64\wwahost.exe
 

Berichts-ID: adf18511-16b6-11e6-bf73-b4b52fc7b10a
 

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
 

Error: (05/10/2016 03:32:05 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: HPConnectedRemoteService.exe, Version: 1.0.1206.0, Zeitstempel: 0x503e3c5d

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.18264, Zeitstempel: 0x56e1bd71

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000000000008a5c

ID des fehlerhaften Prozesses: 0x218c

Startzeit der fehlerhaften Anwendung: 0xHPConnectedRemoteService.exe0

Pfad der fehlerhaften Anwendung: HPConnectedRemoteService.exe1

Pfad des fehlerhaften Moduls: HPConnectedRemoteService.exe2

Berichtskennung: HPConnectedRemoteService.exe3

Vollständiger Name des fehlerhaften Pakets: HPConnectedRemoteService.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HPConnectedRemoteService.exe5
 

Error: (05/10/2016 03:32:03 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: HPConnectedRemoteService.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: System.Management.ManagementException

   bei System.Management.ManagementException.ThrowWithExtendedInfo(System.Management.ManagementStatus)

   bei System.Management.SinkForEventQuery.Cancel()

   bei System.Management.ManagementEventWatcher.Stop()

   bei HP.Seeker.ProcessMonitor.StopProcessWatchers()

   bei HP.Seeker.ProcessKeeperService.StopProcesMonitors()

   bei HP.Seeker.HPSeekerSwitchboard.StartUserService()

   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)

   bei System.Threading.ThreadHelper.ThreadStart()
 

Error: (05/07/2016 12:48:42 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)

Description: There was an error with the Windows Location Provider database
 

Error: (05/05/2016 07:39:07 PM) (Source: MsiInstaller) (EventID: 1002) (User: André-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList".
 
 

Systemfehler:

=============

Error: (05/11/2016 06:44:20 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/11/2016 06:44:16 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/11/2016 06:37:30 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (05/11/2016 06:37:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 8.1 für x64-basierte Systeme (KB3153704)
 

Error: (05/11/2016 06:37:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 11 für Windows 8.1 für x64-Systeme (KB3154070)
 

Error: (05/11/2016 06:37:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 8.1 für x64-basierte Systeme (KB3151058)
 

Error: (05/11/2016 06:37:06 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Anmeldeinformationen Server für SSL. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/11/2016 06:37:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3138378)
 

Error: (05/11/2016 06:37:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 8.1 für x64-basierte Systeme (KB3156059)
 

Error: (05/11/2016 06:37:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 8.1 für x64-basierte Systeme (KB3156019)
 
 

CodeIntegrity:

===================================

  Date: 2013-08-19 13:11:11.339

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Glary Utilities 3\ProcObsrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz

Prozentuale Nutzung des RAM: 30%

Installierter physikalischer RAM: 8147.35 MB

Verfügbarer physikalischer RAM: 5672.59 MB

Summe virtueller Speicher: 12499.35 MB

Verfügbarer virtueller Speicher: 9549.21 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:918.61 GB) (Free:89.71 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive d: (Recovery Image) (Fixed) (Total:10.98 GB) (Free:1.33 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive e: (NVCDV243) (CDROM) (Total:1.18 GB) (Free:0 GB) CDFS

Drive g: () (Removable) (Total:1.86 GB) (Free:0.32 GB) FAT32
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9FE15288)
 

Partition: GPT.
 

========================================================

Disk: 1 (Size: 1.9 GB) (Disk ID: 000A4BAE)

Partition 1: (Active) - (Size=1.9 GB) - (Type=0C)
 

==================== Ende von Addition.txt ============================

M-K-D-B

12.05.2016 16:03

Servus,

du installierst Windows 10 während dein Rechner noch mit Schadsoftware infiziert ist? :killpc:

Chronos5896

12.05.2016 16:23

Jaaaa... das Problem war, dass ich gerade die Addition senden wollte und anschließen der "Neustart-Screen" da war....Also das ganze geschah recht plötzlich, ohne Vorwarnung. Ich war aus diesem Grund schon recht genervt... Aber das sollte (hoffentlich) kein großes Problem darstellen... :( :party:

M-K-D-B

12.05.2016 16:26

Zitat:

Zitat von Chronos5896 (Beitrag 1584639)

Aber das sollte (hoffentlich) kein großes Problem darstellen... :( :party:

Das wird sich zeigen.

Wenn Windows 10 installiert ist, bitte nochmal FRST scannen und die Logdatei posten.

Chronos5896

12.05.2016 16:40

Addition:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016

durchgeführt von André (2016-05-12 17:33:04)

Gestartet von C:\Users\André\Desktop

Windows 10 Home Version 1511 (X64) (2016-05-11 17:57:54)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-447048058-3512354665-2473454594-500 - Administrator - Disabled)

André (S-1-5-21-447048058-3512354665-2473454594-1001 - Administrator - Enabled) => C:\Users\André

DefaultAccount (S-1-5-21-447048058-3512354665-2473454594-503 - Limited - Disabled)

Gast (S-1-5-21-447048058-3512354665-2473454594-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-447048058-3512354665-2473454594-1003 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)

Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Arma 3 (HKLM\...\Steam App 107410) (Version:  - Bohemia Interactive)

Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version:  - Ubisoft Montreal)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{3b87484e-d70b-4b4f-ad59-2ae89571e2cf}) (Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{74d1ef14-dd39-4749-b051-e183a1e27f5e}) (Version: 1.1.58.35540 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{ccdc9cfe-8ba7-4c6c-ac5f-b2d6cfa49efc}) (Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG)

Avira Launcher (x32 Version: 1.1.58.35540 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 2(TM) (HKLM-x32\...\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}) (Version:  - )

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Call of Duty: Black Ops II - Multiplayer (HKLM\...\Steam App 202990) (Version:  - Treyarch)

Call of Duty: Black Ops II - Zombies (HKLM\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM\...\Steam App 202970) (Version:  - Treyarch)

Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)

Cosmic DJ (HKLM\...\Steam App 297110) (Version:  - Gl33k)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)

CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4319 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DayZ (HKLM\...\Steam App 221100) (Version:  - Bohemia Interactive)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)

DVDVideoSoftTB DE Toolbar (HKLM-x32\...\DVDVideoSoftTB_DE Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB DE)

Empire Earth II (HKLM-x32\...\{DF315348-721C-40B8-BAE2-58C6C7D935A2}) (Version: 1.02 - Sierra)

Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version:  - Bethesda Game Studios)

Fistful of Frags (HKLM-x32\...\Steam App 265630) (Version:  - Fistful of Frags Team)

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Garry)

GD Hardware Scan (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\GD Hardware Scan) (Version: 00.00.00.01 - Social Web Tech LTD)

Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

Hotline Miami (HKLM\...\Steam App 219150) (Version:  - Dennaton Games)

Hotline Miami 2: Wrong Number (HKLM\...\Steam App 274170) (Version:  - Dennaton Games)

HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)

HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)

HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät (HKLM\...\{61ADDE9C-3AE6-46FC-9127-DFFF637AED03}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Deskjet 3050A J611 series Hilfe (HKLM-x32\...\{97DDCAB8-B770-4089-A10F-67568069D78A}) (Version: 140.0.2.2 - Hewlett Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)

HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.2.8.25 - Hewlett-Packard Company)

HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.2.8.17 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)

iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

LibreOffice 4.0.0.3 (HKLM-x32\...\{8EA569F1-97AF-4C3E-A0CB-4846C2D35A81}) (Version: 4.0.0.3 - The Document Foundation)

Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.74 - Peter Lorenz)

METAL GEAR SOLID V: GROUND ZEROES (HKLM-x32\...\Steam App 311340) (Version:  - Kojima Productions)

METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version:  - Konami Digital Entertainment)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)

Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.2 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 365.10 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation)

NVIDIA Grafiktreiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 365.10 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)

NVIDIA Miracast Virtueller Ton 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 364.51 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)

Oddworld: New 'n' Tasty (HKLM-x32\...\Steam App 314660) (Version:  - Just Add Water (Developments), Ltd.)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

ParkControl (HKLM-x32\...\ParkControl) (Version: 1.0.1.1 - Bitsum)

Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)

PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)

Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

Prezi (HKLM-x32\...\{63B8F931-2BF3-4D5D-9C28-E2EF88D83DFD}) (Version: 5.2.8 - Ihr Firmenname)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)

Rust (HKLM\...\Steam App 252490) (Version:  - Facepunch Studios)

Savant - Ascent (HKLM-x32\...\Steam App 259530) (Version:  - DPad Studios)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden

Shovel Knight (HKLM-x32\...\Steam App 250760) (Version:  - Yacht Club Games)

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

Spelunky (HKLM-x32\...\Steam App 239350) (Version:  - )

Splinter Cell Pandora Tomorrow (HKLM-x32\...\{084A9731-D05B-4ADA-B4A0-0ADD25FD7152}) (Version: 1.00.000 - )

Spore (HKLM-x32\...\Steam App 17390) (Version:  - Maxis™)

Spore: Creepy & Cute Parts Pack (HKLM-x32\...\Steam App 17440) (Version:  - Maxis™)

Spore: Galactic Adventures (HKLM-x32\...\Steam App 24720) (Version:  - EA - Maxis)

Spotify (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)

Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)

Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)

Studie zur Verbesserung von HP Deskjet 3050A J611 series Produkten (HKLM\...\{EF27865C-E636-47C4-8B35-CE8A88045681}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)

The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)

The Culling (HKLM\...\Steam App 437220) (Version:  - Xaviant)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts)

TI xHCI Filter Driver 1.0.0.4 (HKLM-x32\...\TI xHCI Filter Driver) (Version: 1.0.0.4 - Texas Instruments Inc.)

TI-Nspire™ Computer Link (HKLM-x32\...\{6C5AC088-3136-4043-8985-8B0772A9580E}) (Version: 3.9.0.455 - Texas Instruments Inc.)

Titan Quest (HKLM-x32\...\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}) (Version: 1.00.0000 - Iron Lore)

Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version:  - Ubisoft Montreal)

Tom Clancy's Splinter Cell (HKLM-x32\...\{A174402A-2EE6-4B86-A930-7BC85A9933BD}) (Version: 1.00.000 - )

Tom Clancy's Splinter Cell Chaos Theory (HKLM-x32\...\{888DD888-82BE-4D85-BCB2-2E042CD3E844}) (Version: 1.05.157 - Ubisoft)

Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft)

Torchlight (HKLM-x32\...\{4F64A46D-67F7-4497-AEA2-313D4305A5F6}) (Version: 1.0.0 - JoWooD)

Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)

UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)

UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden

Unity Web Player (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS)

Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft)

VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)

Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.8.1 (HKLM\...\VulkanRT1.0.8.1) (Version: 1.0.8.1 - LunarG, Inc.)

Warface Launcher (Beta) (HKLM-x32\...\{28D1723C-31C4-4A83-9799-DFFB3739026D}) (Version: 1.0.0 - Crytek GmbH)

WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)

WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

Xfire (remove only) (HKLM-x32\...\Xfire) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-447048058-3512354665-2473454594-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)

CustomCLSID: HKU\S-1-5-21-447048058-3512354665-2473454594-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileCoAuth.exe (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {06D7A464-EF44-45D8-84D0-271723F24DE0} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {1134DC2D-A6A0-4857-8DFB-4E0F493CAD27} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)

Task: {209E117D-060D-4095-8226-DA5E1595625F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-05-11] (Microsoft Corporation)

Task: {26E83EB5-0985-4BE7-BE5E-A47972D7D075} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {2778F490-C82D-42C7-BD77-940CA83F03E8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {29A654A0-ECEF-430C-B9C6-D5DA8218C67A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {3580C528-E0CC-4735-86E3-63A0B8BCC508} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)

Task: {36B39AF8-A1F5-45D2-8D4F-EB27E08C54E3} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {40E4C8BC-EA1E-4D37-A03B-1857D062C43C} - System32\Tasks\ParkControl => C:\Program Files\ParkControl\ParkControl.exe [2015-12-19] (Bitsum LLC)

Task: {49C98BDB-BD1D-44D9-96D6-A9FD5A0AA4AA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-04-06] (Hewlett-Packard)

Task: {4F62D898-94B2-44CA-967B-B256E3AA2E0F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-03-07] (Hewlett-Packard)

Task: {515A7EF6-E89A-4707-835F-F8036BCBB02A} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG

Task: {5842D560-FD1E-4C48-8FE4-4E908E3A4342} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {5C501871-B552-4961-BA3E-5523A8366733} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {60C66F2F-213B-4ED5-B256-181C19F42793} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {6A2657BF-8F02-410D-810E-39C37F40A9BA} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {6F39FF7F-B3BA-4B3A-A5AB-3A23DF5DAB64} - System32\Tasks\ScanToPCActivationApp.exe_{1848EEB4-045A-492D-97B5-A1ABDF8FFF51} => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {6FC02CE7-982F-4BEF-98FB-E61DF158C1A8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {90507BF5-E1A6-42A0-A439-4B985CA6A4E2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {92B2AB27-9A52-4CB1-8134-B402BA47CF27} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {9D530CB6-040B-44AE-9475-D09A3FB7A7AC} - System32\Tasks\AdobeFlashPlayerUpdate => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {9DC3DA29-DD1B-43FF-AE81-EAAF2E7E2D03} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-16] (Adobe Systems Incorporated)

Task: {A5222A0D-D798-4B9B-AB9E-7AE2C8386DCC} - System32\Tasks\{4E94E5CB-7B80-4D4F-9653-5B045DBB0562} => pcalua.exe -a "C:\Users\André\Desktop\Slender\Slender - The Eight Pages.exe" -d C:\Users\André\Desktop\Slender

Task: {C00B675E-A0CB-4537-91C1-0C49FABDC62D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {C544F986-1B75-4321-B5A1-159607876F3C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {CE8DAAA5-D76A-4FA8-9C91-D49F86D10B9A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {D019B7C6-F960-47C3-90A7-9C8E4C03031F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)

Task: {D36339C6-3F6E-4807-AD00-0BB992F63485} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {D506C41B-B7C3-473F-B43A-792AF9162E0D} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe

Task: {D66487DC-8EB8-41B7-8AB1-DB26B7F97C86} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

Task: {DB1D07AD-1615-4786-BF2E-7A552990DC79} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {DE24F91B-6F17-4300-A47A-8B20F054EB6B} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

Task: {FDD4D2D1-CB44-4FBA-B4E2-759CB8AA2E0C} - System32\Tasks\Game_Booster_Startup => C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\HP Deskjet 3050A J611 series.exe_{ADEB0F8D-477A-423E-88C7-3805843D3C4B}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HP Deskjet 3050A J611 series.exeĖ-install -prfn HP Deskjet 3050A J611 series (Netzwerk) -ePCUrl hxxps:/h30495.www3.hp.com

Task: C:\WINDOWS\Tasks\HPCustPartic.exe_{490607ED-986D-40BF-BE2C-16BB55AA064D}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPCustPartic.exe

Task: C:\WINDOWS\Tasks\ScanToPCActivationApp.exe_{E224E030-DCCD-4312-8F4E-8929E6A12B66}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe

Task: C:\WINDOWS\Tasks\Toolbox.exe_{69C0F34C-8CBD-4512-B13B-F24BE0CC5553}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\Toolbox.exe

Task: C:\WINDOWS\Tasks\XboxStatTask.job => C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-05-11 19:23 - 2016-04-27 14:18 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-03-18 22:37 - 2016-05-02 07:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-03-18 22:36 - 2016-05-02 07:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-03-18 22:37 - 2016-05-02 07:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2013-01-03 19:54 - 2015-03-26 21:23 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe

2016-04-01 13:38 - 2016-05-02 07:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-18 22:37 - 2016-05-02 07:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-05-12 16:18 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-05-12 16:18 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-05-11 20:06 - 2016-05-11 20:06 - 00959176 _____ () C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\ClientTelemetry.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-05-12 16:18 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-05-12 16:18 - 2016-04-23 06:25 - 00674816 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll

2016-05-12 16:18 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-05-12 16:17 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-05-12 16:18 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-05-12 16:18 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-03-11 22:49 - 2016-03-11 22:49 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2015-10-22 13:22 - 2016-04-26 15:17 - 00174872 _____ () C:\Users\André\AppData\Local\TeamSpeak 3 Client\quazip.dll

2015-10-22 13:21 - 2016-04-26 15:17 - 00103192 _____ () C:\Users\André\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win64.dll

2015-10-22 13:21 - 2016-04-26 15:17 - 00107800 _____ () C:\Users\André\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll

2015-10-22 13:22 - 2016-04-26 15:17 - 00312088 _____ () C:\Users\André\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll

2015-10-22 13:22 - 2016-04-26 15:17 - 00485656 _____ () C:\Users\André\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2016-03-18 22:36 - 2016-05-02 08:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2013-03-12 18:10 - 2016-04-29 22:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll

2014-05-23 14:15 - 2016-04-30 02:10 - 02549840 _____ () C:\Program Files (x86)\Steam\video.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2013-02-02 18:37 - 2016-04-30 02:10 - 00829008 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2016-03-09 15:02 - 2016-02-18 00:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll

2016-05-11 20:06 - 2016-05-11 20:06 - 00679624 _____ () C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\ClientTelemetry.dll

2013-02-02 18:37 - 2016-04-28 03:00 - 49825056 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2012-11-22 11:38 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2015-01-23 16:20 - 2015-09-25 01:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\André\Downloads\Wallpaper\wallhaven-156813.jpg

DNS Servers: 192.168.0.1 - 192.168.0.2

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AMD External Events Utility => 2

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: Origin Client Service => 3

MSCONFIG\Services: WeGameClientService => 2

HKLM\...\StartupApproved\StartupFolder: => "Speedport W 101 WLAN Manager.lnk"

HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"

HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"

HKLM\...\StartupApproved\Run: => "XboxStat"

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "BingDesktop"

HKLM\...\StartupApproved\Run32: => "HP Software Update"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "BF2Hub Client"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Xfire.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Steam.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "SUPERAntiSpyware"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "GUDelayStartup"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify Web Helper"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{305A4E45-3FEB-4293-B381-B5077FD9A4ED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{58307D7D-485E-456D-8D40-11B231A2D5F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{B9204EB4-20CE-4AA5-8A1A-9324E6806329}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{22E36B34-93CD-4B4F-A5FB-5AFFD7F9217C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{0EEDE53D-E7BD-4BFE-8190-8761E301FC43}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [{4B42444C-39EC-4DE6-93C4-F37658C012D4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [UDP Query User{559A0FF3-0735-4B3A-A8DC-D372E4F2896F}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [TCP Query User{4C1C0507-D001-4114-820D-F8D2A26F0901}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [{7040C603-3913-4BA6-BD1E-E937BD819C14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [{4E5CBD26-E8EA-4812-9703-902E1871A0D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [{7D629C6C-2852-4C13-AE7C-C6E7D0F14E6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{E43876E3-8A49-45C9-A1BE-FD30D5F51304}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{34F5F4C6-599F-4D22-A403-1FEFEB04F774}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{9211B61F-6AB9-436E-AE60-FB5D52BFC6F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{61D4255A-0725-4A20-86E9-A34E748B4F71}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{D904EB1D-3CF6-4D18-ABAD-152EC199EABB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{2DADFF23-7A32-40C7-97D3-74EBF26FC353}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{B0ACEF2B-4DBF-4D2D-81F2-89919DADDAE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{3AF93217-33B9-474C-8F86-6DA2552DA48D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{5B9E721E-7C91-4AFB-8D54-F23B323D8D38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [UDP Query User{99098603-601D-4775-9C3F-BEC0C8D673D8}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [TCP Query User{F6A32B85-6372-45E2-92B3-0AFC0691F1B7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [{874A6590-5815-43EC-B566-7CBEB1912029}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{EC6C7D2A-4B98-43D4-A98D-A5F23E492F17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [{637479C3-5E89-4FAC-8365-DDD65B257ED8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [UDP Query User{4765706F-B3BB-43A0-B242-0A13CE229922}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [TCP Query User{5CC79050-2FF6-4A33-8DA8-E4C465A2A3DE}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [{AFFB53C2-13B6-4304-A294-3BB329BD7A32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{410F82CB-A332-4660-91D6-53EC5F42E57D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{262C47AA-404B-48BA-8D26-F495E5069386}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{F0065602-B604-471B-AF08-8447902B5DA3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{1274CD60-E8E4-469D-9A12-04443BFCBAF8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{4B96DCC9-61BA-4747-8A57-9B0DEC5D083A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{44F22EFC-FB2D-4E4D-B1A1-3A9C31E2D3A6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{B2D89EFE-0FB9-4756-9144-21CFA0AA27BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{55449DDA-7F51-4C61-8861-B3C700B4A81F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{BDCC194D-ABA9-4892-B891-FCC35B720DD7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{56C07A57-BFA5-470E-8B65-52E04CA6E40E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{569AB28B-79DA-4152-98C7-8FC358FC16A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{7A629A0A-1D85-462A-8131-C0F1A0FED8BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{2330A750-582C-4E3D-8E02-56F0FA5E1800}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [{8E73AB31-C8AD-4F78-AEBF-565629D44666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [UDP Query User{FEBEFACE-4396-49C6-91E1-33AFCF378EB8}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [TCP Query User{6A11780A-C673-4C25-B63A-2AC4A906E120}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{FABC240F-274B-47AC-858F-438E14DB95F9}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe

FirewallRules: [{E25BCE61-2553-4378-B9C8-32AA3DE4414B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [{9522C61C-0FA5-42CF-99A6-8796BC8ABBB3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [UDP Query User{2E6E8688-E1C8-47E6-B2D9-7E594F859EA7}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [TCP Query User{35496E53-0B61-408F-8762-039BB5C1035C}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [{0464378F-CD97-4216-A966-760782823490}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{5A8CFE7B-899A-4490-BA84-3F58FA2E8F38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{11C55929-3DB5-4FFF-8D23-A6A63911510C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{57EA8011-8988-497E-84D0-F9502DB2A1CA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{2F46FAC5-39DA-48CB-87B7-2DB63DF9CC9B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{B3852398-F898-4F6F-A736-001671E9D853}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{371DDF5E-863C-4B04-AA36-9BCA8957ABAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{68241CF8-3F67-4606-9CD6-9B44629D1FA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{8B7F0374-A4DB-4F25-96A9-11C334A778A5}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{009D5093-8B1A-47ED-B2D1-75DCD3A253AF}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{87D57B25-B389-4873-99F1-F1F4B56DB10E}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{B5EF835B-497F-41DE-BC00-7BF39F3DBAB2}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [UDP Query User{BE617A23-6191-4E1B-A1CE-EF5C38152015}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [TCP Query User{04AEA058-464E-45DC-9F12-93012201A387}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [UDP Query User{A24F1D35-3B16-4FC8-AE35-EFD7D74302B5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [TCP Query User{80A3FF00-1CE5-40FA-BD74-CDF7B1FEE7A5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [{AA00C280-76B2-4D38-A4EA-F40C474FE62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{07E757A0-BEA6-4D39-BA47-1322E5A4F972}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{03192198-3130-4974-96A8-59765F30ABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{F900103E-5B80-4ECD-88B4-7F921E7982DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{5601EF96-3EE6-4AC2-8E5C-9B3C70F1E055}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{04A68A81-678E-4E08-A891-118BF8A82A13}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{CCC81A88-F96B-482F-A763-63A8BC4FBABD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{10F8A69D-4A78-43DE-A010-A8D58C912584}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{5EBD8610-3469-4A9A-B763-93442B6B1E9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [{3FB0EED4-4D83-4864-8256-1112E438528A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [UDP Query User{4B650623-F185-4E8F-B32C-923681610894}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [TCP Query User{3FA714E6-27A8-4C83-A83D-3F14708C7522}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [{55B707B7-0D91-4B83-BD64-3B43BC35E5C3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [{75D3D7EE-8634-44FC-9B6D-398DBD05BDDC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [{B3852A97-3C8C-4718-9B64-A8BDCA0A2E5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{83BA189A-2359-4DF2-9B85-4243C11527B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{74E5C093-E8B3-43AF-B873-FF22E5D9C20D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{148BD9DE-CE7B-495B-808D-4493B12374BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [UDP Query User{73446A00-A12F-4119-8470-7F8545100C5C}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [TCP Query User{18EBDBB0-6F97-4DBD-9FE2-E95D002547EA}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [{D9D485A7-E593-4F69-8763-71B6B32FA889}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{D5E03025-EB0F-4A7C-BB33-A3F9DD115AE6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{44407D7A-EA04-4913-90A4-F6270C3E8934}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{82DD64BA-BE73-4A59-BC83-D0CBCAD11B33}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [UDP Query User{042AC962-6FD7-4955-A24A-518DF58804BB}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [TCP Query User{5F2D22DE-18CE-4B5B-A2A4-AE30C787FF0F}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [{0D170153-EA06-42AA-9A18-94CF56EC2C1D}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [{B0603A95-9371-4DDE-873B-3E9B50060C5E}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [UDP Query User{8A83C40E-4BAC-4B5E-A74D-221CCD63CF3D}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{7366368D-2C3F-4C0C-94C9-79291994E5EF}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{F7147E30-BE04-4702-BB59-3CF913696D06}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{EE59E25E-E681-4F6D-AF72-AD2A1F391D43}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{863BA61A-4FEF-4D22-B6F7-2A6A445CD55D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [{4A0EF7F6-2123-422C-9B03-E67434EC229A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [{080B0641-9913-418C-83AF-B418D6421F3E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [{6C8D7433-1032-4924-92EE-E231B2C60069}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [UDP Query User{EDD83D34-D790-4F04-AF0B-12A09F8A5F6B}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{7A28D840-1BC8-4A6B-8A79-EFF25E28477E}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{35E64E04-DDCC-40A5-B7DF-DC924212030D}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [{2060FED0-2274-4EAA-BF88-879831BB9D71}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{E1FD84FD-A7D8-4832-9B25-FBFC9302E2EA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{CE1660CA-ECA5-44DE-A94C-25D5ADC5A300}] => (Allow) LPort=2869

FirewallRules: [{0B44211B-1D40-4E7E-B060-6CA1F81528A3}] => (Allow) LPort=1900

FirewallRules: [TCP Query User{843B521A-F575-49BB-A5E6-A8BAF3F39FDB}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [UDP Query User{1F14F8E7-EF0B-4C0D-A2DC-7D79E56FCD90}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [{F547011A-F4A2-4823-9514-BFBC0F04DF47}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [{84A117B9-6229-4B07-AA4C-592C006DAF17}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [TCP Query User{199F5DA8-537B-4802-A081-BCC0BDCA4D49}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [UDP Query User{615E09E1-58DF-4F2B-9001-EC72C28F1ED4}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [TCP Query User{ABC0EAEB-F6E3-42D6-A4AF-E4698720895E}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A73EB24B-5760-406C-92F6-01680BFD0E17}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [{0FEB2ABB-96A2-4F9B-B5DF-352080B000A0}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{8E386419-8F65-43C5-A842-65EC79A74C5E}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{47442B8F-1B8A-4BF4-98E7-5A4025AA9F33}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{CFC7DE7C-9FD1-46FC-86B0-78C26A9B7775}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{4EEC4502-D631-42C4-8990-017FBDE70B5A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{88C338FE-13BA-49E4-B938-296AEF29807B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{B9B504D2-0BED-44C8-87A1-B03F9A25CB3D}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{DC7BF070-51A4-41A4-B1FB-F05B12A05E32}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [{F7667282-18D2-4EEC-845E-3B3BCA6702EA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{2C72D711-F6FE-41A5-8E01-8BD6424A81C9}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{979C4E21-D9C4-49F4-BCE0-EF5DA3644EDE}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{3D45854F-3635-4D6A-ADF4-0EBEE2575081}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{854A33A6-B57B-49A4-BC0B-B447864978E7}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [TCP Query User{0A63AFDA-95CA-4F6C-8E66-D7A04EF5F6CA}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{2AD03E61-6CB6-4DB2-A353-217D91DEBB80}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [TCP Query User{BA0ECDB6-A448-4439-A0A6-374398724581}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [UDP Query User{11A23F99-555C-444F-857D-496287B9A48F}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [TCP Query User{7061FBA7-108A-4A04-A3F1-0C3A4259C982}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{7A239781-B79A-4B27-92BB-D85A772CDE98}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [{4A5D0F96-864C-488C-A3DE-31A996CDA638}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{3D8FCAA0-AF8A-4080-B76E-91B00EEF2A12}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{B320A94D-2C0A-40BC-A57E-B8FF09548745}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{84D5A424-B0E1-48B8-99F7-56DB8A7D831D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{866386DB-549E-451B-8B08-324399D57293}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{E167F28F-3CDB-4E9C-BC93-54BA1A2C3C01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [TCP Query User{2DED59E3-BCD4-4AD1-A751-69C0D993C9C0}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [UDP Query User{1AF00546-D969-4B95-BCE1-20AD60109548}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [{552360C1-3E4D-4478-B81A-743E57C60ADE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [{F7029719-F975-4165-B9DE-4B50E21FBD96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [TCP Query User{5B108050-331D-4078-91F7-333C2FD058F0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{20BC6940-EC8A-4D84-ADA8-0CAC1583C908}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{89D923D0-52AD-45D3-AB79-2B2FCFA7EEC9}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{E211D57C-F8D2-4000-8717-F6EB9BFED9C1}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{6E596561-2567-4AA7-8292-2F13D08053FD}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{CC9108CA-CAB2-488E-8173-A09E6DBEFB19}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [TCP Query User{FCADCA24-8865-4D9D-A358-492C0B930FD7}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [UDP Query User{816344A6-B7AA-436A-BAF9-ED24DFB232A6}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [{67C1EB95-DE28-4F2B-9058-7B3A2C72D823}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{81FA855D-D76B-4447-984C-FD3599D90623}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{BE7C4B8C-D22C-4D39-8769-D7D17B52C432}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\DeviceSetup.exe

FirewallRules: [{4E37412E-E309-4DA4-84C7-61826D930253}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe

FirewallRules: [{B04BA630-71E3-48BB-A53D-43E9B3AD9A5F}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [{A878638D-E967-4491-BF24-9D823CEE97A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [{D5C94B11-2437-48C8-A43B-1EBADF3BE765}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [TCP Query User{CA39CCB2-445B-4394-977C-B740672B0350}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [UDP Query User{4368F7BC-2A7C-4AF9-AB66-A7C6C67449E8}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{434FF7C0-9231-4B8F-98BD-4272CB9EA40F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{C7B0AA1C-B270-46B5-A6DD-E789B6CF0316}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [{B76F0C57-6BE2-41BA-8FDC-D600A548733A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{4C19DB87-1819-4DEC-A423-C5D30DED153C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{F4AD3048-6EC2-4C89-9AE4-3079E222A515}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{16766F7A-84A3-47D2-BB13-C739A79A6BC4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{3B2F061E-9DEE-4A60-BB66-553D949A1CE8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{4CCB3275-446A-4A5E-984B-E661A5906CE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{DA5F7BAC-034D-4514-AB1E-3A8F49EC98FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{E54F4129-E34D-4242-B28A-3934E7456BA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{1A3EF871-27E4-4CBC-B74B-B2383F0DFFF9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{937343C7-994B-47F9-A316-66587B212F11}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{DC6B5AFF-687B-42F4-B773-5B4C844B8A0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{10B45A3C-510B-49D0-B8E9-18C5B443BB7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [TCP Query User{510AED7B-4C10-43DD-9E41-C64994BFEC9E}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [UDP Query User{6484B4C8-1523-4FEA-896C-6D9D95068AA8}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [TCP Query User{04AD78F5-1C42-4AC3-8B08-0F992D282CA5}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [UDP Query User{60F2F817-AD57-4421-9452-9459338C4CB0}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [{D8D25627-2D6B-416C-A1B7-F15DB81C4CC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{74FD4306-F4CE-4F02-AA0A-66FABFAF2526}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{A05353E0-15C5-4636-91E5-3EC3DB7A9298}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{AE67764D-BD85-405D-909A-B40D6A2D364B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{61338F15-C415-4289-88E5-E4D1456EF082}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{AB62C390-516F-4D0D-9FA3-691F9B6D52D2}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{AF7CEDE2-2D7E-4353-8884-1C2491D82A4C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{2CA630FB-839D-40DB-9F36-228B7F224361}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{D0268C2D-602B-4546-BA83-BB6BABE79EDF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{D4C2095B-7F89-4922-B8C4-B8827F84A2DB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{3887276F-6885-4E22-9F4B-3ABC201D6449}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{31DF9A60-1465-4A7A-B93D-7EFBCDCFFCF2}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{2F8C6559-20EB-4C1C-A37B-B5B2985E543D}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{19FCCC1D-B026-4BE5-9F5E-A60048284120}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{2673C359-B53B-40E4-9129-0E366B225601}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{F1B9229F-40C8-4BF7-8D09-07764066B3BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{22118AC4-2C6C-4A21-98E3-22CFE6EF30C1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{355A24CE-660C-4E0D-B3CF-5F9A3A64C921}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{654C398B-5DF4-4B24-B2E4-377168A393CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{D35C7CB8-288E-4C90-B301-D96FD6B4F1C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{77A50C45-2191-4923-814A-6E2BA8B0A02E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{E3578200-F99C-4118-8086-3D55D018DEBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{3ECB7973-9619-405E-A6BE-1388AE65C0B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{14ABDB4B-012F-4764-A146-87C57D507349}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{6060FB65-6E8E-42FF-B1B8-775DECDC7404}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{0344D2C1-5B07-4B6F-9100-DC8397B20E52}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{9C5C6319-4BD7-4958-AF85-0390C636FE26}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{BDB3192D-E7E9-413A-9396-70B3873A65C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{EA882129-9F6E-47F3-B8A1-B714FAC38BB0}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{0B154B0F-E8BF-4E10-9AFB-602ACE45A389}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{03DEC87D-CCA7-47CD-9190-805E58AD02C6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{FC0B2104-7D49-442C-97B7-677F51721FFA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{31EE1A19-89CE-40CC-9182-EF6F2780E78D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{557AFC36-E381-4CA4-AEE1-AC9E8DABCAF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{FE4BB57F-B9C3-4B90-9532-3E31FAD1EC69}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{E1EB2855-1798-4EDE-8B3B-82F5861378C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{06EA1C1B-FFA2-492D-8A33-9B57E002C990}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [{A3195EE6-31BB-4692-B88C-0E8C843A9BF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [TCP Query User{D4F0CF27-9B16-40CA-B125-178FA527F955}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [UDP Query User{C90CE360-557C-4657-B704-20F529B34C8E}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{40D1C4D5-5783-45CE-B50D-2EEC03C7C17A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [{525FF56F-BD8E-4FF1-AC06-78A70ED5832D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [{9DE8F934-ADAD-4318-880A-BA8C00675792}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{2F81C9A0-7BBE-4D71-8051-29AB84EE6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{9B76B1C8-8DBF-4CE0-B5C7-68EB6AF179B8}] => (Allow) LPort=53000

FirewallRules: [{04F9A470-EA54-4848-9D2A-6E4D29869AAE}] => (Allow) LPort=52000

FirewallRules: [{0BF3A6A9-E717-4CA1-811F-FD224CB1CF16}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{0B7E2287-CCDE-4D09-92E0-D055D959B6F6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/12/2016 03:28:26 PM) (Source: MsiInstaller) (EventID: 1002) (User: André-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList".
 

Error: (05/12/2016 03:27:12 PM) (Source: MsiInstaller) (EventID: 1002) (User: André-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\3992CCA085027EB4A929D9DCAAB94321\SourceList".
 

Error: (05/12/2016 03:25:38 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll8
 

Error: (05/11/2016 08:52:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: André-PC)

Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (05/11/2016 08:39:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: André-PC)

Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (05/11/2016 08:34:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: André-PC)

Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (05/11/2016 08:33:16 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: André-PC)

Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (05/11/2016 08:27:17 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: André-PC)

Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (05/11/2016 08:18:16 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: André-PC)

Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (05/11/2016 07:48:51 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "AVWMIEVTProv" wurde versucht, die Abfrage "select * from Event_Notification" zu registrieren, deren Zielklasse "Event_Notification" im Namespace "//./ROOT/CIMV2/Applications/Avira_AntiVir" nicht vorhanden ist. Die Abfrage wird ignoriert.
 
 

Systemfehler:

=============

Error: (05/12/2016 05:19:31 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/12/2016 05:19:28 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/12/2016 04:28:11 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_73190 erreicht.
 

Error: (05/12/2016 04:28:05 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/12/2016 04:28:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_73190" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (05/12/2016 04:28:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (05/12/2016 03:23:49 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "RAS-Verbindungsverwaltung" wurde mit dem folgenden dienstspezifischen Fehler beendet: 

%%2147943860
 

Error: (05/12/2016 03:14:28 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/12/2016 03:14:20 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/11/2016 09:58:38 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 
 

CodeIntegrity:

===================================

  Date: 2016-05-12 17:16:52.931

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-12 16:24:34.033

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:48:00.228

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:44:44.663

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:21:50.610

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz

Prozentuale Nutzung des RAM: 32%

Installierter physikalischer RAM: 8147.35 MB

Verfügbarer physikalischer RAM: 5479.47 MB

Summe virtueller Speicher: 10067.35 MB

Verfügbarer virtueller Speicher: 6852.34 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:918.61 GB) (Free:88.15 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive d: (Recovery Image) (Fixed) (Total:10.98 GB) (Free:1.33 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive e: (NVCDV243) (CDROM) (Total:1.18 GB) (Free:0 GB) CDFS

Drive g: () (Removable) (Total:1.86 GB) (Free:0.32 GB) FAT32
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9FE15288)
 

Partition: GPT.
 

========================================================

Disk: 1 (Size: 1.9 GB) (Disk ID: 000A4BAE)

Partition 1: (Active) - (Size=1.9 GB) - (Type=0C)
 

==================== Ende von Addition.txt ============================

M-K-D-B

12.05.2016 19:48

Servus,

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von JRT,
die beiden neuen Logdateien von FRST.

Chronos5896

13.05.2016 15:38

Hier ist die Lieferung:

AdwCleaner

Code:

# AdwCleaner v5.116 - Bericht erstellt am 13/05/2016 um 15:49:25

# Aktualisiert am 09/05/2016 von Xplode

# Datenbank : 2016-05-13.1 [Server]

# Betriebssystem : Windows 10 Home  (X64)

# Benutzername : André - ANDRÉ-PC

# Gestartet von : C:\Users\André\Desktop\AdwCleaner_5.116(1).exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 
 

***** [ Dateien ] *****
 
 

***** [ DLLs ] *****
 
 

***** [ WMI ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Aufgabenplanung ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
 

***** [ Internetbrowser ] *****
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Winsock Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C1].txt - [5472 Bytes] - [10/05/2016 15:23:20]

C:\AdwCleaner\AdwCleaner[C2].txt - [1101 Bytes] - [13/05/2016 15:49:25]

C:\AdwCleaner\AdwCleaner[R0].txt - [15105 Bytes] - [11/11/2013 21:04:52]

C:\AdwCleaner\AdwCleaner[S0].txt - [12418 Bytes] - [11/11/2013 21:09:06]

C:\AdwCleaner\AdwCleaner[S1].txt - [5380 Bytes] - [10/05/2016 15:08:36]

C:\AdwCleaner\AdwCleaner[S2].txt - [1120 Bytes] - [10/05/2016 15:43:59]

C:\AdwCleaner\AdwCleaner[S3].txt - [1318 Bytes] - [13/05/2016 15:46:00]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1541 Bytes] ##########

mbam

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 13.05.2016

Suchlaufzeit: 15:58

Protokolldatei: mbam.txt

Administrator: Ja
 

Version: 2.2.1.1043

Malware-Datenbank: v2016.05.13.03

Rootkit-Datenbank: v2016.05.06.01

Lizenz: Kostenlose Version

Malware-Schutz: Deaktiviert

Schutz vor bösartigen Websites: Deaktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 10

CPU: x64

Dateisystem: NTFS

Benutzer: André
 

Suchlauftyp: Bedrohungssuchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 360452

Abgelaufene Zeit: 22 Min., 55 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Warnen

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswerte: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 0

(keine bösartigen Elemente erkannt)
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

JRT

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.6 (04.25.2016)

Operating System: Windows 10 Home x64 

Ran by Andr‚ (Administrator) on 13.05.2016 at 16:26:49,60

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 14 
 

Successfully deleted: C:\ProgramData\drivergenius (Folder) 

Successfully deleted: C:\Users\Andr‚\AppData\Local\{24B29207-3322-4D94-90E9-8ECAFD309037} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{65BC6DE7-8908-4ABB-897E-3ABEBB0B279F} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{76197741-C028-4472-88CD-6EAD44F6B5C1} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{87408B0F-AD09-4686-B42F-EE51881D54D3} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{8E72EEED-01DC-43F5-885D-644CB0D73393} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{9192A2E1-3AC4-4241-98B3-E69A1BDFE216} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{C8736271-2A6B-4938-A946-E0C49CE7694B} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{C885FD39-78A6-4883-9963-943DA296B296} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{C9EA7F92-C7FD-46A0-AE20-160B7F670A4B} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\{E03E8241-A844-4D39-906E-C13EFB796C3E} (Empty Folder)

Successfully deleted: C:\Users\Andr‚\AppData\Local\crashrpt (Folder) 

Successfully deleted: C:\Users\Andr‚\AppData\Roaming\Mozilla\Firefox\Profiles\x7nutf5z.default-1438960782100\extensions\mailcheck@web.de\searchplugins\mailcom-search.xml (File) 

Successfully deleted: C:\WINDOWS\system32\Tasks\Game_Booster_Startup (Task)
 
 
 

Registry: 1 
 

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value) 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 13.05.2016 at 16:28:10,65

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Chronos5896

13.05.2016 15:41

Addition

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016

durchgeführt von André (2016-05-13 16:32:52)

Gestartet von C:\Users\André\Desktop

Windows 10 Home Version 1511 (X64) (2016-05-11 17:57:54)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-447048058-3512354665-2473454594-500 - Administrator - Disabled)

André (S-1-5-21-447048058-3512354665-2473454594-1001 - Administrator - Enabled) => C:\Users\André

DefaultAccount (S-1-5-21-447048058-3512354665-2473454594-503 - Limited - Disabled)

Gast (S-1-5-21-447048058-3512354665-2473454594-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-447048058-3512354665-2473454594-1003 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)

Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Arma 3 (HKLM\...\Steam App 107410) (Version:  - Bohemia Interactive)

Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version:  - Ubisoft Montreal)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{bfb60b68-92b8-481b-b416-7e05b4ea01c9}) (Version: 1.1.61.18979 - Avira Operations GmbH & Co. KG)

Avira Launcher (x32 Version: 1.1.61.18979 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 2(TM) (HKLM-x32\...\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}) (Version:  - )

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Call of Duty: Black Ops II - Multiplayer (HKLM\...\Steam App 202990) (Version:  - Treyarch)

Call of Duty: Black Ops II - Zombies (HKLM\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM\...\Steam App 202970) (Version:  - Treyarch)

Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)

Cosmic DJ (HKLM\...\Steam App 297110) (Version:  - Gl33k)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)

CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4319 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DayZ (HKLM\...\Steam App 221100) (Version:  - Bohemia Interactive)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)

DVDVideoSoftTB DE Toolbar (HKLM-x32\...\DVDVideoSoftTB_DE Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB DE)

Empire Earth II (HKLM-x32\...\{DF315348-721C-40B8-BAE2-58C6C7D935A2}) (Version: 1.02 - Sierra)

Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version:  - Bethesda Game Studios)

Fistful of Frags (HKLM-x32\...\Steam App 265630) (Version:  - Fistful of Frags Team)

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Garry)

GD Hardware Scan (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\GD Hardware Scan) (Version: 00.00.00.01 - Social Web Tech LTD)

GD Hardware Scan (HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\GD Hardware Scan) (Version: 00.00.00.01 - Social Web Tech LTD)

Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

Hotline Miami (HKLM\...\Steam App 219150) (Version:  - Dennaton Games)

Hotline Miami 2: Wrong Number (HKLM\...\Steam App 274170) (Version:  - Dennaton Games)

HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)

HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)

HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät (HKLM\...\{61ADDE9C-3AE6-46FC-9127-DFFF637AED03}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Deskjet 3050A J611 series Hilfe (HKLM-x32\...\{97DDCAB8-B770-4089-A10F-67568069D78A}) (Version: 140.0.2.2 - Hewlett Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)

HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.2.8.25 - Hewlett-Packard Company)

HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.2.8.17 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)

iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

LibreOffice 4.0.0.3 (HKLM-x32\...\{8EA569F1-97AF-4C3E-A0CB-4846C2D35A81}) (Version: 4.0.0.3 - The Document Foundation)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.74 - Peter Lorenz)

METAL GEAR SOLID V: GROUND ZEROES (HKLM-x32\...\Steam App 311340) (Version:  - Kojima Productions)

METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version:  - Konami Digital Entertainment)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)

Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.2 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 365.10 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation)

NVIDIA Grafiktreiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 365.10 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)

NVIDIA Miracast Virtueller Ton 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 364.51 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)

Oddworld: New 'n' Tasty (HKLM-x32\...\Steam App 314660) (Version:  - Just Add Water (Developments), Ltd.)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

ParkControl (HKLM-x32\...\ParkControl) (Version: 1.0.1.1 - Bitsum)

Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)

PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)

Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

Prezi (HKLM-x32\...\{63B8F931-2BF3-4D5D-9C28-E2EF88D83DFD}) (Version: 5.2.8 - Ihr Firmenname)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)

Rust (HKLM\...\Steam App 252490) (Version:  - Facepunch Studios)

Savant - Ascent (HKLM-x32\...\Steam App 259530) (Version:  - DPad Studios)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden

Shovel Knight (HKLM-x32\...\Steam App 250760) (Version:  - Yacht Club Games)

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

Spelunky (HKLM-x32\...\Steam App 239350) (Version:  - )

Splinter Cell Pandora Tomorrow (HKLM-x32\...\{084A9731-D05B-4ADA-B4A0-0ADD25FD7152}) (Version: 1.00.000 - )

Spore (HKLM-x32\...\Steam App 17390) (Version:  - Maxis™)

Spore: Creepy & Cute Parts Pack (HKLM-x32\...\Steam App 17440) (Version:  - Maxis™)

Spore: Galactic Adventures (HKLM-x32\...\Steam App 24720) (Version:  - EA - Maxis)

Spotify (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)

Spotify (HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)

Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)

Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)

Studie zur Verbesserung von HP Deskjet 3050A J611 series Produkten (HKLM\...\{EF27865C-E636-47C4-8B35-CE8A88045681}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

TeamSpeak 3 Client (HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)

The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)

The Culling (HKLM\...\Steam App 437220) (Version:  - Xaviant)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts)

TI xHCI Filter Driver 1.0.0.4 (HKLM-x32\...\TI xHCI Filter Driver) (Version: 1.0.0.4 - Texas Instruments Inc.)

TI-Nspire™ Computer Link (HKLM-x32\...\{6C5AC088-3136-4043-8985-8B0772A9580E}) (Version: 3.9.0.455 - Texas Instruments Inc.)

Titan Quest (HKLM-x32\...\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}) (Version: 1.00.0000 - Iron Lore)

Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version:  - Ubisoft Montreal)

Tom Clancy's Splinter Cell (HKLM-x32\...\{A174402A-2EE6-4B86-A930-7BC85A9933BD}) (Version: 1.00.000 - )

Tom Clancy's Splinter Cell Chaos Theory (HKLM-x32\...\{888DD888-82BE-4D85-BCB2-2E042CD3E844}) (Version: 1.05.157 - Ubisoft)

Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft)

Torchlight (HKLM-x32\...\{4F64A46D-67F7-4497-AEA2-313D4305A5F6}) (Version: 1.0.0 - JoWooD)

Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)

UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)

UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden

Unity Web Player (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS)

Unity Web Player (HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS)

Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft)

VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)

Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.8.1 (HKLM\...\VulkanRT1.0.8.1) (Version: 1.0.8.1 - LunarG, Inc.)

Warface Launcher (Beta) (HKLM-x32\...\{28D1723C-31C4-4A83-9799-DFFB3739026D}) (Version: 1.0.0 - Crytek GmbH)

WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)

WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

Xfire (remove only) (HKLM-x32\...\Xfire) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-447048058-3512354665-2473454594-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)

CustomCLSID: HKU\S-1-5-21-447048058-3512354665-2473454594-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileCoAuth.exe (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {06D7A464-EF44-45D8-84D0-271723F24DE0} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {1134DC2D-A6A0-4857-8DFB-4E0F493CAD27} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)

Task: {209E117D-060D-4095-8226-DA5E1595625F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-05-11] (Microsoft Corporation)

Task: {26E83EB5-0985-4BE7-BE5E-A47972D7D075} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {2778F490-C82D-42C7-BD77-940CA83F03E8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {29A654A0-ECEF-430C-B9C6-D5DA8218C67A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {3580C528-E0CC-4735-86E3-63A0B8BCC508} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)

Task: {36845F08-5763-4540-A234-3BD7B90DE7F8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {36B39AF8-A1F5-45D2-8D4F-EB27E08C54E3} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {49C98BDB-BD1D-44D9-96D6-A9FD5A0AA4AA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-04-06] (Hewlett-Packard)

Task: {4F62D898-94B2-44CA-967B-B256E3AA2E0F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-03-07] (Hewlett-Packard)

Task: {515A7EF6-E89A-4707-835F-F8036BCBB02A} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG

Task: {5842D560-FD1E-4C48-8FE4-4E908E3A4342} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {5C501871-B552-4961-BA3E-5523A8366733} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {60C66F2F-213B-4ED5-B256-181C19F42793} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {64CBC6CC-16C6-4E62-9BD4-34A147514232} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {6A2657BF-8F02-410D-810E-39C37F40A9BA} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {6F39FF7F-B3BA-4B3A-A5AB-3A23DF5DAB64} - System32\Tasks\ScanToPCActivationApp.exe_{1848EEB4-045A-492D-97B5-A1ABDF8FFF51} => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {808E2334-C46B-47A8-B5A3-7785420605B2} - System32\Tasks\ParkControl => C:\Program Files\ParkControl\ParkControl.exe [2015-12-19] (Bitsum LLC)

Task: {90507BF5-E1A6-42A0-A439-4B985CA6A4E2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {92B2AB27-9A52-4CB1-8134-B402BA47CF27} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {9D530CB6-040B-44AE-9475-D09A3FB7A7AC} - System32\Tasks\AdobeFlashPlayerUpdate => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {9DC3DA29-DD1B-43FF-AE81-EAAF2E7E2D03} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-16] (Adobe Systems Incorporated)

Task: {A5222A0D-D798-4B9B-AB9E-7AE2C8386DCC} - System32\Tasks\{4E94E5CB-7B80-4D4F-9653-5B045DBB0562} => pcalua.exe -a "C:\Users\André\Desktop\Slender\Slender - The Eight Pages.exe" -d C:\Users\André\Desktop\Slender

Task: {C00B675E-A0CB-4537-91C1-0C49FABDC62D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {C544F986-1B75-4321-B5A1-159607876F3C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {CE8DAAA5-D76A-4FA8-9C91-D49F86D10B9A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {D019B7C6-F960-47C3-90A7-9C8E4C03031F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)

Task: {D36339C6-3F6E-4807-AD00-0BB992F63485} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {D506C41B-B7C3-473F-B43A-792AF9162E0D} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe

Task: {D66487DC-8EB8-41B7-8AB1-DB26B7F97C86} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

Task: {DE24F91B-6F17-4300-A47A-8B20F054EB6B} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\HP Deskjet 3050A J611 series.exe_{ADEB0F8D-477A-423E-88C7-3805843D3C4B}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HP Deskjet 3050A J611 series.exeĖ-install -prfn HP Deskjet 3050A J611 series (Netzwerk) -ePCUrl hxxps:/h30495.www3.hp.com

Task: C:\WINDOWS\Tasks\HPCustPartic.exe_{490607ED-986D-40BF-BE2C-16BB55AA064D}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPCustPartic.exe

Task: C:\WINDOWS\Tasks\ScanToPCActivationApp.exe_{E224E030-DCCD-4312-8F4E-8929E6A12B66}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe

Task: C:\WINDOWS\Tasks\Toolbox.exe_{69C0F34C-8CBD-4512-B13B-F24BE0CC5553}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\Toolbox.exe

Task: C:\WINDOWS\Tasks\XboxStatTask.job => C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2013-01-03 19:54 - 2015-03-26 21:23 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe

2016-03-18 22:37 - 2016-05-02 07:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-03-18 22:36 - 2016-05-02 07:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-03-18 22:37 - 2016-05-02 07:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-05-12 16:18 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-05-12 16:18 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-05-11 20:06 - 2016-05-11 20:06 - 00959176 _____ () C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\ClientTelemetry.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-03-11 22:49 - 2016-03-11 22:49 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-18 22:37 - 2016-05-02 07:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-05-12 16:18 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-05-12 16:18 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-05-12 16:17 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-05-12 16:18 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-05-12 16:18 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2012-11-22 11:38 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2016-03-18 22:36 - 2016-05-02 08:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\André\Downloads\Wallpaper\wallhaven-156813.jpg

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\André\Downloads\Wallpaper\wallhaven-156813.jpg

DNS Servers: 192.168.0.1 - 192.168.0.2

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AMD External Events Utility => 2

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: Origin Client Service => 3

MSCONFIG\Services: WeGameClientService => 2

HKLM\...\StartupApproved\StartupFolder: => "Speedport W 101 WLAN Manager.lnk"

HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"

HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"

HKLM\...\StartupApproved\Run: => "XboxStat"

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "BingDesktop"

HKLM\...\StartupApproved\Run32: => "HP Software Update"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "BF2Hub Client"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Xfire.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Steam.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "SUPERAntiSpyware"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "GUDelayStartup"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\StartupFolder: => "Xfire.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\StartupFolder: => "Steam.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "SUPERAntiSpyware"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "GUDelayStartup"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Spotify Web Helper"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{305A4E45-3FEB-4293-B381-B5077FD9A4ED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{58307D7D-485E-456D-8D40-11B231A2D5F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{B9204EB4-20CE-4AA5-8A1A-9324E6806329}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{22E36B34-93CD-4B4F-A5FB-5AFFD7F9217C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{0EEDE53D-E7BD-4BFE-8190-8761E301FC43}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [{4B42444C-39EC-4DE6-93C4-F37658C012D4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [UDP Query User{559A0FF3-0735-4B3A-A8DC-D372E4F2896F}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [TCP Query User{4C1C0507-D001-4114-820D-F8D2A26F0901}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [{7040C603-3913-4BA6-BD1E-E937BD819C14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [{4E5CBD26-E8EA-4812-9703-902E1871A0D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [{7D629C6C-2852-4C13-AE7C-C6E7D0F14E6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{E43876E3-8A49-45C9-A1BE-FD30D5F51304}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{34F5F4C6-599F-4D22-A403-1FEFEB04F774}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{9211B61F-6AB9-436E-AE60-FB5D52BFC6F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{61D4255A-0725-4A20-86E9-A34E748B4F71}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{D904EB1D-3CF6-4D18-ABAD-152EC199EABB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{2DADFF23-7A32-40C7-97D3-74EBF26FC353}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{B0ACEF2B-4DBF-4D2D-81F2-89919DADDAE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{3AF93217-33B9-474C-8F86-6DA2552DA48D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{5B9E721E-7C91-4AFB-8D54-F23B323D8D38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [UDP Query User{99098603-601D-4775-9C3F-BEC0C8D673D8}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [TCP Query User{F6A32B85-6372-45E2-92B3-0AFC0691F1B7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [{874A6590-5815-43EC-B566-7CBEB1912029}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{EC6C7D2A-4B98-43D4-A98D-A5F23E492F17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [{637479C3-5E89-4FAC-8365-DDD65B257ED8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [UDP Query User{4765706F-B3BB-43A0-B242-0A13CE229922}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [TCP Query User{5CC79050-2FF6-4A33-8DA8-E4C465A2A3DE}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [{AFFB53C2-13B6-4304-A294-3BB329BD7A32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{410F82CB-A332-4660-91D6-53EC5F42E57D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{262C47AA-404B-48BA-8D26-F495E5069386}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{F0065602-B604-471B-AF08-8447902B5DA3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{1274CD60-E8E4-469D-9A12-04443BFCBAF8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{4B96DCC9-61BA-4747-8A57-9B0DEC5D083A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{44F22EFC-FB2D-4E4D-B1A1-3A9C31E2D3A6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{B2D89EFE-0FB9-4756-9144-21CFA0AA27BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{55449DDA-7F51-4C61-8861-B3C700B4A81F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{BDCC194D-ABA9-4892-B891-FCC35B720DD7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{56C07A57-BFA5-470E-8B65-52E04CA6E40E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{569AB28B-79DA-4152-98C7-8FC358FC16A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{7A629A0A-1D85-462A-8131-C0F1A0FED8BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{2330A750-582C-4E3D-8E02-56F0FA5E1800}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [{8E73AB31-C8AD-4F78-AEBF-565629D44666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [UDP Query User{FEBEFACE-4396-49C6-91E1-33AFCF378EB8}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [TCP Query User{6A11780A-C673-4C25-B63A-2AC4A906E120}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{FABC240F-274B-47AC-858F-438E14DB95F9}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe

FirewallRules: [{E25BCE61-2553-4378-B9C8-32AA3DE4414B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [{9522C61C-0FA5-42CF-99A6-8796BC8ABBB3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [UDP Query User{2E6E8688-E1C8-47E6-B2D9-7E594F859EA7}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [TCP Query User{35496E53-0B61-408F-8762-039BB5C1035C}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [{0464378F-CD97-4216-A966-760782823490}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{5A8CFE7B-899A-4490-BA84-3F58FA2E8F38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{11C55929-3DB5-4FFF-8D23-A6A63911510C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{57EA8011-8988-497E-84D0-F9502DB2A1CA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{2F46FAC5-39DA-48CB-87B7-2DB63DF9CC9B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{B3852398-F898-4F6F-A736-001671E9D853}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{371DDF5E-863C-4B04-AA36-9BCA8957ABAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{68241CF8-3F67-4606-9CD6-9B44629D1FA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{8B7F0374-A4DB-4F25-96A9-11C334A778A5}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{009D5093-8B1A-47ED-B2D1-75DCD3A253AF}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{87D57B25-B389-4873-99F1-F1F4B56DB10E}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{B5EF835B-497F-41DE-BC00-7BF39F3DBAB2}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [UDP Query User{BE617A23-6191-4E1B-A1CE-EF5C38152015}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [TCP Query User{04AEA058-464E-45DC-9F12-93012201A387}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [UDP Query User{A24F1D35-3B16-4FC8-AE35-EFD7D74302B5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [TCP Query User{80A3FF00-1CE5-40FA-BD74-CDF7B1FEE7A5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [{AA00C280-76B2-4D38-A4EA-F40C474FE62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{07E757A0-BEA6-4D39-BA47-1322E5A4F972}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{03192198-3130-4974-96A8-59765F30ABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{F900103E-5B80-4ECD-88B4-7F921E7982DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{5601EF96-3EE6-4AC2-8E5C-9B3C70F1E055}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{04A68A81-678E-4E08-A891-118BF8A82A13}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{CCC81A88-F96B-482F-A763-63A8BC4FBABD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{10F8A69D-4A78-43DE-A010-A8D58C912584}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{5EBD8610-3469-4A9A-B763-93442B6B1E9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [{3FB0EED4-4D83-4864-8256-1112E438528A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [UDP Query User{4B650623-F185-4E8F-B32C-923681610894}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [TCP Query User{3FA714E6-27A8-4C83-A83D-3F14708C7522}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [{55B707B7-0D91-4B83-BD64-3B43BC35E5C3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [{75D3D7EE-8634-44FC-9B6D-398DBD05BDDC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [{B3852A97-3C8C-4718-9B64-A8BDCA0A2E5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{83BA189A-2359-4DF2-9B85-4243C11527B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{74E5C093-E8B3-43AF-B873-FF22E5D9C20D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{148BD9DE-CE7B-495B-808D-4493B12374BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [UDP Query User{73446A00-A12F-4119-8470-7F8545100C5C}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [TCP Query User{18EBDBB0-6F97-4DBD-9FE2-E95D002547EA}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [{D9D485A7-E593-4F69-8763-71B6B32FA889}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{D5E03025-EB0F-4A7C-BB33-A3F9DD115AE6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{44407D7A-EA04-4913-90A4-F6270C3E8934}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{82DD64BA-BE73-4A59-BC83-D0CBCAD11B33}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [UDP Query User{042AC962-6FD7-4955-A24A-518DF58804BB}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [TCP Query User{5F2D22DE-18CE-4B5B-A2A4-AE30C787FF0F}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [{0D170153-EA06-42AA-9A18-94CF56EC2C1D}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [{B0603A95-9371-4DDE-873B-3E9B50060C5E}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [UDP Query User{8A83C40E-4BAC-4B5E-A74D-221CCD63CF3D}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{7366368D-2C3F-4C0C-94C9-79291994E5EF}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{F7147E30-BE04-4702-BB59-3CF913696D06}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{EE59E25E-E681-4F6D-AF72-AD2A1F391D43}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{863BA61A-4FEF-4D22-B6F7-2A6A445CD55D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [{4A0EF7F6-2123-422C-9B03-E67434EC229A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [{080B0641-9913-418C-83AF-B418D6421F3E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [{6C8D7433-1032-4924-92EE-E231B2C60069}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [UDP Query User{EDD83D34-D790-4F04-AF0B-12A09F8A5F6B}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{7A28D840-1BC8-4A6B-8A79-EFF25E28477E}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{35E64E04-DDCC-40A5-B7DF-DC924212030D}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [{2060FED0-2274-4EAA-BF88-879831BB9D71}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{E1FD84FD-A7D8-4832-9B25-FBFC9302E2EA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{CE1660CA-ECA5-44DE-A94C-25D5ADC5A300}] => (Allow) LPort=2869

FirewallRules: [{0B44211B-1D40-4E7E-B060-6CA1F81528A3}] => (Allow) LPort=1900

FirewallRules: [TCP Query User{843B521A-F575-49BB-A5E6-A8BAF3F39FDB}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [UDP Query User{1F14F8E7-EF0B-4C0D-A2DC-7D79E56FCD90}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [{F547011A-F4A2-4823-9514-BFBC0F04DF47}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [{84A117B9-6229-4B07-AA4C-592C006DAF17}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [TCP Query User{199F5DA8-537B-4802-A081-BCC0BDCA4D49}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [UDP Query User{615E09E1-58DF-4F2B-9001-EC72C28F1ED4}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [TCP Query User{ABC0EAEB-F6E3-42D6-A4AF-E4698720895E}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A73EB24B-5760-406C-92F6-01680BFD0E17}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [{0FEB2ABB-96A2-4F9B-B5DF-352080B000A0}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{8E386419-8F65-43C5-A842-65EC79A74C5E}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{47442B8F-1B8A-4BF4-98E7-5A4025AA9F33}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{CFC7DE7C-9FD1-46FC-86B0-78C26A9B7775}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{4EEC4502-D631-42C4-8990-017FBDE70B5A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{88C338FE-13BA-49E4-B938-296AEF29807B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{B9B504D2-0BED-44C8-87A1-B03F9A25CB3D}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{DC7BF070-51A4-41A4-B1FB-F05B12A05E32}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [{F7667282-18D2-4EEC-845E-3B3BCA6702EA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{2C72D711-F6FE-41A5-8E01-8BD6424A81C9}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{979C4E21-D9C4-49F4-BCE0-EF5DA3644EDE}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{3D45854F-3635-4D6A-ADF4-0EBEE2575081}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{854A33A6-B57B-49A4-BC0B-B447864978E7}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [TCP Query User{0A63AFDA-95CA-4F6C-8E66-D7A04EF5F6CA}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{2AD03E61-6CB6-4DB2-A353-217D91DEBB80}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [TCP Query User{BA0ECDB6-A448-4439-A0A6-374398724581}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [UDP Query User{11A23F99-555C-444F-857D-496287B9A48F}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [TCP Query User{7061FBA7-108A-4A04-A3F1-0C3A4259C982}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{7A239781-B79A-4B27-92BB-D85A772CDE98}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [{4A5D0F96-864C-488C-A3DE-31A996CDA638}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{3D8FCAA0-AF8A-4080-B76E-91B00EEF2A12}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{B320A94D-2C0A-40BC-A57E-B8FF09548745}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{84D5A424-B0E1-48B8-99F7-56DB8A7D831D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{866386DB-549E-451B-8B08-324399D57293}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{E167F28F-3CDB-4E9C-BC93-54BA1A2C3C01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [TCP Query User{2DED59E3-BCD4-4AD1-A751-69C0D993C9C0}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [UDP Query User{1AF00546-D969-4B95-BCE1-20AD60109548}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [{552360C1-3E4D-4478-B81A-743E57C60ADE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [{F7029719-F975-4165-B9DE-4B50E21FBD96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [TCP Query User{5B108050-331D-4078-91F7-333C2FD058F0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{20BC6940-EC8A-4D84-ADA8-0CAC1583C908}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{89D923D0-52AD-45D3-AB79-2B2FCFA7EEC9}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{E211D57C-F8D2-4000-8717-F6EB9BFED9C1}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{6E596561-2567-4AA7-8292-2F13D08053FD}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{CC9108CA-CAB2-488E-8173-A09E6DBEFB19}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [TCP Query User{FCADCA24-8865-4D9D-A358-492C0B930FD7}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [UDP Query User{816344A6-B7AA-436A-BAF9-ED24DFB232A6}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [{67C1EB95-DE28-4F2B-9058-7B3A2C72D823}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{81FA855D-D76B-4447-984C-FD3599D90623}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{BE7C4B8C-D22C-4D39-8769-D7D17B52C432}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\DeviceSetup.exe

FirewallRules: [{4E37412E-E309-4DA4-84C7-61826D930253}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe

FirewallRules: [{B04BA630-71E3-48BB-A53D-43E9B3AD9A5F}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [{A878638D-E967-4491-BF24-9D823CEE97A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [{D5C94B11-2437-48C8-A43B-1EBADF3BE765}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [TCP Query User{CA39CCB2-445B-4394-977C-B740672B0350}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [UDP Query User{4368F7BC-2A7C-4AF9-AB66-A7C6C67449E8}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{434FF7C0-9231-4B8F-98BD-4272CB9EA40F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{C7B0AA1C-B270-46B5-A6DD-E789B6CF0316}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [{B76F0C57-6BE2-41BA-8FDC-D600A548733A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{4C19DB87-1819-4DEC-A423-C5D30DED153C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{F4AD3048-6EC2-4C89-9AE4-3079E222A515}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{16766F7A-84A3-47D2-BB13-C739A79A6BC4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{3B2F061E-9DEE-4A60-BB66-553D949A1CE8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{4CCB3275-446A-4A5E-984B-E661A5906CE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{DA5F7BAC-034D-4514-AB1E-3A8F49EC98FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{E54F4129-E34D-4242-B28A-3934E7456BA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{1A3EF871-27E4-4CBC-B74B-B2383F0DFFF9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{937343C7-994B-47F9-A316-66587B212F11}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{DC6B5AFF-687B-42F4-B773-5B4C844B8A0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{10B45A3C-510B-49D0-B8E9-18C5B443BB7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [TCP Query User{510AED7B-4C10-43DD-9E41-C64994BFEC9E}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [UDP Query User{6484B4C8-1523-4FEA-896C-6D9D95068AA8}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [TCP Query User{04AD78F5-1C42-4AC3-8B08-0F992D282CA5}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [UDP Query User{60F2F817-AD57-4421-9452-9459338C4CB0}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [{D8D25627-2D6B-416C-A1B7-F15DB81C4CC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{74FD4306-F4CE-4F02-AA0A-66FABFAF2526}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{A05353E0-15C5-4636-91E5-3EC3DB7A9298}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{AE67764D-BD85-405D-909A-B40D6A2D364B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{61338F15-C415-4289-88E5-E4D1456EF082}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{AB62C390-516F-4D0D-9FA3-691F9B6D52D2}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{AF7CEDE2-2D7E-4353-8884-1C2491D82A4C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{2CA630FB-839D-40DB-9F36-228B7F224361}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{D0268C2D-602B-4546-BA83-BB6BABE79EDF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{D4C2095B-7F89-4922-B8C4-B8827F84A2DB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{3887276F-6885-4E22-9F4B-3ABC201D6449}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{31DF9A60-1465-4A7A-B93D-7EFBCDCFFCF2}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{2F8C6559-20EB-4C1C-A37B-B5B2985E543D}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{19FCCC1D-B026-4BE5-9F5E-A60048284120}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{2673C359-B53B-40E4-9129-0E366B225601}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{F1B9229F-40C8-4BF7-8D09-07764066B3BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{22118AC4-2C6C-4A21-98E3-22CFE6EF30C1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{355A24CE-660C-4E0D-B3CF-5F9A3A64C921}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{654C398B-5DF4-4B24-B2E4-377168A393CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{D35C7CB8-288E-4C90-B301-D96FD6B4F1C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{77A50C45-2191-4923-814A-6E2BA8B0A02E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{E3578200-F99C-4118-8086-3D55D018DEBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{3ECB7973-9619-405E-A6BE-1388AE65C0B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{14ABDB4B-012F-4764-A146-87C57D507349}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{6060FB65-6E8E-42FF-B1B8-775DECDC7404}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{0344D2C1-5B07-4B6F-9100-DC8397B20E52}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{9C5C6319-4BD7-4958-AF85-0390C636FE26}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{BDB3192D-E7E9-413A-9396-70B3873A65C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{EA882129-9F6E-47F3-B8A1-B714FAC38BB0}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{0B154B0F-E8BF-4E10-9AFB-602ACE45A389}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{03DEC87D-CCA7-47CD-9190-805E58AD02C6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{FC0B2104-7D49-442C-97B7-677F51721FFA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{31EE1A19-89CE-40CC-9182-EF6F2780E78D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{557AFC36-E381-4CA4-AEE1-AC9E8DABCAF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{FE4BB57F-B9C3-4B90-9532-3E31FAD1EC69}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{E1EB2855-1798-4EDE-8B3B-82F5861378C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{06EA1C1B-FFA2-492D-8A33-9B57E002C990}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [{A3195EE6-31BB-4692-B88C-0E8C843A9BF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [TCP Query User{D4F0CF27-9B16-40CA-B125-178FA527F955}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [UDP Query User{C90CE360-557C-4657-B704-20F529B34C8E}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{40D1C4D5-5783-45CE-B50D-2EEC03C7C17A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [{525FF56F-BD8E-4FF1-AC06-78A70ED5832D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [{9DE8F934-ADAD-4318-880A-BA8C00675792}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{2F81C9A0-7BBE-4D71-8051-29AB84EE6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{8EF9339E-32C4-466C-A1B2-CC5A15EEE422}] => (Allow) LPort=53000

FirewallRules: [{4B1CCD1B-FF0C-4388-A678-F3316FC43445}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{08C12E00-F25A-4E80-9750-4FD8F1A22DA0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{4E8F17ED-C759-42D4-AA3D-EAE5F81D521A}] => (Allow) LPort=52000
 

==================== Wiederherstellungspunkte =========================
 

13-05-2016 16:26:49 JRT Pre-Junkware Removal

13-05-2016 16:29:36 JRT Pre-Junkware Removal
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/13/2016 04:29:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (05/13/2016 04:27:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (05/13/2016 03:44:28 PM) (Source: MsiInstaller) (EventID: 1002) (User: André-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList".
 

Error: (05/13/2016 03:44:10 PM) (Source: MsiInstaller) (EventID: 1002) (User: André-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\3992CCA085027EB4A929D9DCAAB94321\SourceList".
 

Error: (05/12/2016 10:51:31 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba

Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686

Ausnahmecode: 0xc0000602

Fehleroffset: 0x000000000022885f

ID des fehlerhaften Prozesses: 0xbd0

Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0

Pfad der fehlerhaften Anwendung: svchost.exe1

Pfad des fehlerhaften Moduls: svchost.exe2

Berichtskennung: svchost.exe3

Vollständiger Name des fehlerhaften Pakets: svchost.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
 

Error: (05/12/2016 10:51:31 PM) (Source: ESENT) (EventID: 908) (User: )

Description: svchost (3024) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(bt.cxx:1768): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
 

Error: (05/12/2016 03:28:26 PM) (Source: MsiInstaller) (EventID: 1002) (User: André-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList".
 

Error: (05/12/2016 03:27:12 PM) (Source: MsiInstaller) (EventID: 1002) (User: André-PC)

Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\3992CCA085027EB4A929D9DCAAB94321\SourceList".
 

Error: (05/12/2016 03:25:38 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll8
 

Error: (05/11/2016 08:52:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: André-PC)

Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 
 

Systemfehler:

=============

Error: (05/13/2016 04:33:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definitionsupdate für Windows Defender – KB2267602 (Definition 1.219.1638.0)
 

Error: (05/13/2016 04:27:12 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/13/2016 04:27:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/13/2016 03:54:32 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/13/2016 03:54:23 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/13/2016 03:50:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_791d6" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (05/13/2016 03:50:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (05/13/2016 03:49:53 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

%%1056
 

Error: (05/13/2016 03:49:33 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 

Error: (05/13/2016 03:49:31 PM) (Source: Schannel) (EventID: 4102) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Zugriff auf den privaten Schlüssel der Server-Anmeldeinformationen für TLS. Der vom kryptografischen Modul zurückgegebene Fehlercode lautet 0x8009030d. Der interne Fehlerstatus ist 10001.
 
 

CodeIntegrity:

===================================

  Date: 2016-05-12 17:16:52.931

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-12 16:24:34.033

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:48:00.228

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:44:44.663

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:21:50.610

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz

Prozentuale Nutzung des RAM: 32%

Installierter physikalischer RAM: 8147.35 MB

Verfügbarer physikalischer RAM: 5517.43 MB

Summe virtueller Speicher: 10067.35 MB

Verfügbarer virtueller Speicher: 7090.62 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:918.61 GB) (Free:87.61 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive d: (Recovery Image) (Fixed) (Total:10.98 GB) (Free:1.33 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive e: (NVCDV243) (CDROM) (Total:1.18 GB) (Free:0 GB) CDFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9FE15288)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

M-K-D-B

13.05.2016 21:29

Servus,

wir entfernen die letzten Reste und kontrollieren nochmal alles. :)

Hinweis: Der Suchlauf mit ESET kann länger dauern.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

CloseProcesses:

SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 

BHO-x32: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei

RemoveProxy:

CMD: ipconfig /flushdns

CMD: netsh winsock reset

EmptyTemp:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

Starte die HitmanPro.exe
Klicke auf
Entferne den Haken bei
Klicke auf
und
Akzeptiere die Lizenzbedingungen und klicke auf
Klicke auf

und auf
Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
und speichere die Logdatei auf Deinem Desktop.
Schließe HitmanPro und poste mir das Log.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

http://www.trojaner-board.de/extra/lesestoff.pngGibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei von ESET,
die Logdatei von HitmanPro,
die beiden neuen Logdateien von FRST,
die Beantwortung der gestellten Fragen.

M-K-D-B

16.05.2016 12:59

Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

Chronos5896

16.05.2016 20:47

Ich entschuldige mich für jegliche Komplikationen, aber hier sind die Logs

Fragen:
-Gibt es etwas, dass ich nun beachten/tun soll? Z.B. jegliche Passwörter ändern o.ä.?
-Ist mein Computer nun komplett "clean" ?
-Kann ich nun die ganzen Programme löschen?

Logs :

FRST-Fix:

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:16-05-2016

durchgeführt von André (2016-05-16 14:54:27) Run:4

Gestartet von C:\Users\André\Desktop

Geladene Profile: André &  (Verfügbare Profile: André)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

start

CloseProcesses:

SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 

BHO-x32: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei

RemoveProxy:

CMD: ipconfig /flushdns

CMD: netsh winsock reset

EmptyTemp:

end

*****************
 

Prozess erfolgreich geschlossen.

"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909}" => Schlüssel erfolgreich entfernt

HKCR\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Schlüssel nicht gefunden. 

"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" => Schlüssel erfolgreich entfernt

HKCR\Wow6432Node\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} => Schlüssel nicht gefunden. 
 

========= RemoveProxy: =========
 

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt

HKU\S-1-5-21-447048058-3512354665-2473454594-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
 
 

========= Ende von RemoveProxy: =========
 
 

=========  ipconfig /flushdns =========
 
 

Windows-IP-Konfiguration
 

Der DNS-Aufl�sungscache wurde geleert.
 

========= Ende von CMD: =========
 
 

=========  netsh winsock reset =========
 
 

Der Winsock-Katalog wurde zur�ckgesetzt.

Sie m�ssen den Computer neu starten, um den Vorgang abzuschlie�en.
 
 

========= Ende von CMD: =========
 

EmptyTemp: => 610.8 MB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 14:54:48 ====

ESET:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=d08412a2c820e34d871c18d68071402e

# end=init

# utc_time=2016-05-16 01:01:00

# local_time=2016-05-16 03:01:00 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

Update Finalize

Updated modules version: 29487

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=d08412a2c820e34d871c18d68071402e

# end=updated

# utc_time=2016-05-16 01:02:57

# local_time=2016-05-16 03:02:57 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=d08412a2c820e34d871c18d68071402e

# engine=29487

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2016-05-16 04:22:32

# local_time=2016-05-16 06:22:32 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1='Avira Antivirus'

# compatibility_mode=1815 16777213 100 99 12886 62843591 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 8033019 17229895 0 0

# scanned=711204

# found=6

# cleaned=0

# scan_time=11975

sh=B4B3F53A098670C3BD7BE518F67D26C312B0B9B5 ft=1 fh=755ce66cc1c9cb21 vn="Win32/Somoto.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\AndrÃ©\AppData\Local\webplayer\Uninstall.exe.vir"

sh=06A88AA8ADAB0BC62448FED6D6877282D2DF5279 ft=1 fh=c71c00118b993bab vn="Variante von Win32/Somoto.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\AndrÃ©\AppData\Local\webplayer\Online Weather\WebPlayer.exe.vir"

sh=D8E6EE4E1B085FB956CCACAB43F25DBFFCCBDE95 ft=1 fh=60ad219a8f8993b2 vn="Win32/TrojanDownloader.Nymaim.BA Trojaner" ac=I fn="C:\FRST\Quarantine\C\ProgramData\lvecl-74\lvecl-04.exe"

sh=BEBE6055A0F29AEE80A2B3B804656B50C60659A1 ft=1 fh=b650247d07d5d769 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\AndrÃ©\Downloads\MediaPurge - CHIP-Installer.exe.xBAD"

sh=55C46A799DAEEE2FF4B49E13DA142FBB775D96C1 ft=1 fh=d6eaabd957bb62d7 vn="Variante von Win32/Toolbar.Widgi evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\AndrÃ©\Downloads\Setups+Exe\gb3-setup.exe"

sh=B530CBF3C8FE51FD081594D2C441BDA83997C3C1 ft=1 fh=da5b21d4d4b01c3b vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\AndrÃ©\Downloads\Setups+Exe\Intel Turbo Boost Technology Monitor - CHIP-Installer.exe"

HitmanPro

Code:



        Code:


        
HitmanPro 3.7.14.265

www.hitmanpro.com
 

   Computer name . . . . : ANDRÉ-PC

   Windows . . . . . . . : 10.0.0.10586.X64/8

   User name . . . . . . : André-PC\André

   UAC . . . . . . . . . : Enabled

   License . . . . . . . : Free
 

   Scan date . . . . . . : 2016-05-16 21:33:12

   Scan mode . . . . . . : Normal

   Scan duration . . . . : 8m 27s

   Disk access mode  . . : Direct disk access (SRB)

   Cloud . . . . . . . . : Internet

   Reboot  . . . . . . . : No
 

   Threats . . . . . . . : 0

   Traces  . . . . . . . : 23
 

   Objects scanned . . . : 2.767.751

   Files scanned . . . . : 91.123

   Remnants scanned  . . : 1.302.140 files / 1.374.488 keys
 

Suspicious files ____________________________________________________________
 

   C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\2VIW47F0\FRST64[1].exe

      Size . . . . . . . : 2.382.336 bytes

      Age  . . . . . . . : 0.3 days (2016-05-16 14:54:20)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 6A95F0C39E619A8E3BB70D658939E9F600BE775E374C23B10DAC66164F09722F

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.

      Forensic Cluster

         -0.5s C:\Users\André\AppData\Local\Microsoft\Windows\INetCookies\MRUACWK3.txt

         -0.5s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\OGO78NEV\82[1].htm

         -0.3s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2

         -0.3s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2

         -0.2s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F

         -0.2s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F

         -0.1s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\OGO78NEV\FRST64[1].exe

          0.0s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\2VIW47F0\FRST64[1].exe

          0.0s C:\Users\André\Desktop\FRST64.exe

          0.8s C:\Users\André\Desktop\FRST-OlderVersion\

          3.6s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\P01YCZ1I\up64[1]

          7.3s C:\Windows\Prefetch\DLLHOST.EXE-B51A0D95.pf

          7.6s C:\Windows\Prefetch\BITSADMIN.EXE-51D741B1.pf

          7.6s C:\Windows\Prefetch\IPCONFIG.EXE-EEA91845.pf

          9.1s C:\Windows\Prefetch\NETSH.EXE-59756CAC.pf

         17.1s C:\Windows\Prefetch\DASHOST.EXE-38AAABF0.pf

         17.2s C:\Windows\Prefetch\HECISERVER.EXE-AD396A6A.pf

         17.2s C:\Windows\Prefetch\RUNTIMEBROKER.EXE-17E2786F.pf

         19.3s C:\Windows\Prefetch\SEARCHINDEXER.EXE-EF8503D3.pf

         22.1s C:\Windows\Prefetch\SPOOLSV.EXE-AC422BB0.pf

         22.9s C:\Windows\Prefetch\AVIRA.SERVICEHOST.EXE-1D9FA3E8.pf

         24.4s C:\Windows\Temp\UploadUI.log

         25.1s C:\Users\André\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\

         25.1s C:\Users\André\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms

         25.1s C:\Users\André\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms

         27.7s C:\Windows\Prefetch\LMS.EXE-409EDB07.pf

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db
 

   C:\Users\André\AppData\Local\PunkBuster\BF2\pb\pbcl.dll

      Size . . . . . . . : 958.292 bytes

      Age  . . . . . . . : 422.3 days (2015-03-21 14:01:19)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : CA527E6BEC756E0A8920D13184946E0822CC8061ACC0C4D77592CB22DF501E6A

      Fuzzy  . . . . . . : 29.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.
 

   C:\Users\André\AppData\Local\PunkBuster\BF2\pb\pbcls.dll

      Size . . . . . . . : 958.292 bytes

      Age  . . . . . . . : 422.3 days (2015-03-21 14:01:19)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : CA527E6BEC756E0A8920D13184946E0822CC8061ACC0C4D77592CB22DF501E6A

      Fuzzy  . . . . . . : 29.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.
 

   C:\Users\André\AppData\Local\PunkBuster\BF3\pb\dll\wc002331.dll

      Size . . . . . . . : 963.480 bytes

      Age  . . . . . . . : 716.2 days (2014-05-31 17:32:45)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 4693498864B2A4C15EECDD4D132FFDFEDE3F9E4BAFA427F77BC87046A7352D1E

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\AppData\Local\PunkBuster\BF3\pb\dll\wc002344.dll

      Size . . . . . . . : 1.014.616 bytes

      Age  . . . . . . . : 599.2 days (2014-09-25 16:55:32)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 64D8D164CC4FF898DDCCBD5D588E88AF2C1F7EA464C2B7519C78BF0D30CC6F24

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\AppData\Local\PunkBuster\BFP4F\pb\pbcl.dll

      Size . . . . . . . : 915.149 bytes

      Age  . . . . . . . : 815.3 days (2014-02-21 15:28:49)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : E189EF452F559BFAC0C0A91EFADC78EAA569B915985A213F99666BE56FC86165

      Fuzzy  . . . . . . : 29.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.
 

   C:\Users\André\AppData\Local\PunkBuster\BFP4F\pb\PnkBstrK.sys

      Size . . . . . . . : 138.264 bytes

      Age  . . . . . . . : 815.3 days (2014-02-21 15:29:41)

      Entropy  . . . . . : 7.7

      SHA-256  . . . . . : 4194EFFC7236F018722B6DBF76253E1D833FEEEC158835C4DFAAD0555E7A7D91

      RSA Key Size . . . : 1024

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         The file is a device driver. Device drivers run as trusted (highly privileged) code.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\AppData\Local\PunkBuster\HEROES\pb\dll\wc002260.dll

      Size . . . . . . . : 947.283 bytes

      Age  . . . . . . . : 842.2 days (2014-01-25 16:49:58)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 26898E20DB3E20E2986684F1726D3421B0EA9D381F4BD56D6370AAE63973F5B8

      Fuzzy  . . . . . . : 29.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.
 

   C:\Users\André\AppData\Local\PunkBuster\HEROES\pb\dll\wc002323.dll

      Size . . . . . . . : 956.648 bytes

      Age  . . . . . . . : 855.3 days (2014-01-12 13:52:31)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : E88505208F2EA9F150F451C73EEFE57D54A7F50E9D24CB9E647D95A1E826A052

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\AppData\Local\PunkBuster\HEROES\pb\pbcl.dll

      Size . . . . . . . : 956.648 bytes

      Age  . . . . . . . : 452.1 days (2015-02-19 18:11:12)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : E88505208F2EA9F150F451C73EEFE57D54A7F50E9D24CB9E647D95A1E826A052

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\AppData\Local\PunkBuster\HEROES\pb\pbclold.dll

      Size . . . . . . . : 956.648 bytes

      Age  . . . . . . . : 1229.1 days (2013-01-03 17:57:53)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : E88505208F2EA9F150F451C73EEFE57D54A7F50E9D24CB9E647D95A1E826A052

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\AppData\Local\PunkBuster\HEROES\pb\pbcls.dll

      Size . . . . . . . : 956.648 bytes

      Age  . . . . . . . : 1229.1 days (2013-01-03 17:57:53)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : E88505208F2EA9F150F451C73EEFE57D54A7F50E9D24CB9E647D95A1E826A052

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\AppData\Local\PunkBuster\HEROES\pb\PnkBstrK.sys

      Size . . . . . . . : 139.648 bytes

      Age  . . . . . . . : 855.3 days (2014-01-12 13:44:59)

      Entropy  . . . . . : 7.8

      SHA-256  . . . . . : 164A5F0B9153B75F8955C44BFAE12B594B8D53922AE090132695FF2DAD191C8A

      RSA Key Size . . . : 2048

      Authenticode . . . : Valid

      Fuzzy  . . . . . . : 22.0

         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Program contains PE structure anomalies. This is not typical for most programs.

         The file is a device driver. Device drivers run as trusted (highly privileged) code.

         Program is code signed with a valid Authenticode certificate.
 

   C:\Users\André\Desktop\FRST-OlderVersion\FRST64.exe

      Size . . . . . . . : 2.381.312 bytes

      Age  . . . . . . . : 6.2 days (2016-05-10 16:31:32)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 1CA0034CA00C4197E3BA9112F61D854AAA72C6D21EAA7C199E4B4BC1A1E0327A

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.
 

   C:\Users\André\Desktop\FRST64.exe

      Size . . . . . . . : 2.382.336 bytes

      Age  . . . . . . . : 0.3 days (2016-05-16 14:54:20)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 6A95F0C39E619A8E3BB70D658939E9F600BE775E374C23B10DAC66164F09722F

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.

      Forensic Cluster

         -0.5s C:\Users\André\AppData\Local\Microsoft\Windows\INetCookies\MRUACWK3.txt

         -0.5s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\OGO78NEV\82[1].htm

         -0.3s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2

         -0.3s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2

         -0.2s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F

         -0.2s C:\Users\André\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F

         -0.1s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\OGO78NEV\FRST64[1].exe

          0.0s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\2VIW47F0\FRST64[1].exe

          0.0s C:\Users\André\Desktop\FRST64.exe

          0.8s C:\Users\André\Desktop\FRST-OlderVersion\

          3.6s C:\Users\André\AppData\Local\Microsoft\Windows\INetCache\IE\P01YCZ1I\up64[1]

          7.3s C:\Windows\Prefetch\DLLHOST.EXE-B51A0D95.pf

          7.6s C:\Windows\Prefetch\BITSADMIN.EXE-51D741B1.pf

          7.6s C:\Windows\Prefetch\IPCONFIG.EXE-EEA91845.pf

          9.1s C:\Windows\Prefetch\NETSH.EXE-59756CAC.pf

         17.1s C:\Windows\Prefetch\DASHOST.EXE-38AAABF0.pf

         17.2s C:\Windows\Prefetch\HECISERVER.EXE-AD396A6A.pf

         17.2s C:\Windows\Prefetch\RUNTIMEBROKER.EXE-17E2786F.pf

         19.3s C:\Windows\Prefetch\SEARCHINDEXER.EXE-EF8503D3.pf

         22.1s C:\Windows\Prefetch\SPOOLSV.EXE-AC422BB0.pf

         22.9s C:\Windows\Prefetch\AVIRA.SERVICEHOST.EXE-1D9FA3E8.pf

         24.4s C:\Windows\Temp\UploadUI.log

         25.1s C:\Users\André\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\

         25.1s C:\Users\André\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms

         25.1s C:\Users\André\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms

         27.7s C:\Windows\Prefetch\LMS.EXE-409EDB07.pf

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db

         27.9s C:\Users\André\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db
 

   C:\Users\André\Downloads\FRST64(1).exe

      Size . . . . . . . : 2.381.312 bytes

      Age  . . . . . . . : 6.1 days (2016-05-10 17:56:34)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : 1CA0034CA00C4197E3BA9112F61D854AAA72C6D21EAA7C199E4B4BC1A1E0327A

      Needs elevation  . : Yes

      Fuzzy  . . . . . . : 24.0

         Program has no publisher information but prompts the user for permission elevation.

         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.

         Authors name is missing in version info. This is not common to most programs.

         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

         Time indicates that the file appeared recently on this computer.
 
 

Potential Unwanted Programs _________________________________________________
 

   HKLM\SYSTEM\ControlSet001\Services\EventLog\Application\WebCakeUpdaterService\ (WebCake)

   HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WebCakeUpdaterService\ (WebCake)

   HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro)

   HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{98889811-442D-49DD-99D7-DC866BE87DBC} (Claro)

   HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{AE07101B-46D4-4A98-AF68-0333EA26E113} (FLV Player)

   HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow (22Find)

   HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome (22Find)

Chronos5896

16.05.2016 20:49

Addition

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:16-05-2016

durchgeführt von André (2016-05-16 21:45:34)

Gestartet von C:\Users\André\Desktop

Windows 10 Home Version 1511 (X64) (2016-05-11 17:57:54)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-447048058-3512354665-2473454594-500 - Administrator - Disabled)

André (S-1-5-21-447048058-3512354665-2473454594-1001 - Administrator - Enabled) => C:\Users\André

DefaultAccount (S-1-5-21-447048058-3512354665-2473454594-503 - Limited - Disabled)

Gast (S-1-5-21-447048058-3512354665-2473454594-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-447048058-3512354665-2473454594-1003 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)

Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Arma 3 (HKLM\...\Steam App 107410) (Version:  - Bohemia Interactive)

Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version:  - Ubisoft Montreal)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{bfb60b68-92b8-481b-b416-7e05b4ea01c9}) (Version: 1.1.61.18979 - Avira Operations GmbH & Co. KG)

Avira Launcher (x32 Version: 1.1.61.18979 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 2(TM) (HKLM-x32\...\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}) (Version:  - )

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Call of Duty: Black Ops II - Multiplayer (HKLM\...\Steam App 202990) (Version:  - Treyarch)

Call of Duty: Black Ops II - Zombies (HKLM\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM\...\Steam App 202970) (Version:  - Treyarch)

Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)

Cosmic DJ (HKLM\...\Steam App 297110) (Version:  - Gl33k)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)

CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4319 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DayZ (HKLM\...\Steam App 221100) (Version:  - Bohemia Interactive)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)

DVDVideoSoftTB DE Toolbar (HKLM-x32\...\DVDVideoSoftTB_DE Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB DE)

Empire Earth II (HKLM-x32\...\{DF315348-721C-40B8-BAE2-58C6C7D935A2}) (Version: 1.02 - Sierra)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version:  - Bethesda Game Studios)

Fistful of Frags (HKLM-x32\...\Steam App 265630) (Version:  - Fistful of Frags Team)

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Garry)

GD Hardware Scan (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\GD Hardware Scan) (Version: 00.00.00.01 - Social Web Tech LTD)

Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hero Siege (HKLM\...\Steam App 269210) (Version:  - Elias Viglione)

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

Hotline Miami (HKLM\...\Steam App 219150) (Version:  - Dennaton Games)

Hotline Miami 2: Wrong Number (HKLM\...\Steam App 274170) (Version:  - Dennaton Games)

HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)

HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)

HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät (HKLM\...\{61ADDE9C-3AE6-46FC-9127-DFFF637AED03}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Deskjet 3050A J611 series Hilfe (HKLM-x32\...\{97DDCAB8-B770-4089-A10F-67568069D78A}) (Version: 140.0.2.2 - Hewlett Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)

HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.2.8.25 - Hewlett-Packard Company)

HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.4.18.7 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)

iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

LibreOffice 4.0.0.3 (HKLM-x32\...\{8EA569F1-97AF-4C3E-A0CB-4846C2D35A81}) (Version: 4.0.0.3 - The Document Foundation)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Mediapurge (HKLM-x32\...\Mediapurge) (Version: 5.74 - Peter Lorenz)

METAL GEAR SOLID V: GROUND ZEROES (HKLM-x32\...\Steam App 311340) (Version:  - Kojima Productions)

METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version:  - Konami Digital Entertainment)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)

Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.2 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 365.10 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation)

NVIDIA Grafiktreiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 365.10 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)

NVIDIA Miracast Virtueller Ton 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 364.51 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)

Oddworld: New 'n' Tasty (HKLM-x32\...\Steam App 314660) (Version:  - Just Add Water (Developments), Ltd.)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

ParkControl (HKLM-x32\...\ParkControl) (Version: 1.0.1.1 - Bitsum)

Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)

PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)

Portal (HKLM-x32\...\Steam App 400) (Version:  - Valve)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

Prezi (HKLM-x32\...\{63B8F931-2BF3-4D5D-9C28-E2EF88D83DFD}) (Version: 5.2.8 - Ihr Firmenname)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)

Rust (HKLM\...\Steam App 252490) (Version:  - Facepunch Studios)

Savant - Ascent (HKLM-x32\...\Steam App 259530) (Version:  - DPad Studios)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden

Shovel Knight (HKLM-x32\...\Steam App 250760) (Version:  - Yacht Club Games)

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

Spelunky (HKLM-x32\...\Steam App 239350) (Version:  - )

Splinter Cell Pandora Tomorrow (HKLM-x32\...\{084A9731-D05B-4ADA-B4A0-0ADD25FD7152}) (Version: 1.00.000 - )

Spore (HKLM-x32\...\Steam App 17390) (Version:  - Maxis™)

Spore: Creepy & Cute Parts Pack (HKLM-x32\...\Steam App 17440) (Version:  - Maxis™)

Spore: Galactic Adventures (HKLM-x32\...\Steam App 24720) (Version:  - EA - Maxis)

Spotify (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\Spotify) (Version: 1.0.28.87.g8f9312a4 - Spotify AB)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)

Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)

Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)

Studie zur Verbesserung von HP Deskjet 3050A J611 series Produkten (HKLM\...\{EF27865C-E636-47C4-8B35-CE8A88045681}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)

The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)

The Culling (HKLM\...\Steam App 437220) (Version:  - Xaviant)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.0 - Electronic Arts)

TI xHCI Filter Driver 1.0.0.4 (HKLM-x32\...\TI xHCI Filter Driver) (Version: 1.0.0.4 - Texas Instruments Inc.)

TI-Nspire™ Computer Link (HKLM-x32\...\{6C5AC088-3136-4043-8985-8B0772A9580E}) (Version: 3.9.0.455 - Texas Instruments Inc.)

Titan Quest (HKLM-x32\...\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}) (Version: 1.00.0000 - Iron Lore)

Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version:  - Ubisoft Montreal)

Tom Clancy's Splinter Cell (HKLM-x32\...\{A174402A-2EE6-4B86-A930-7BC85A9933BD}) (Version: 1.00.000 - )

Tom Clancy's Splinter Cell Chaos Theory (HKLM-x32\...\{888DD888-82BE-4D85-BCB2-2E042CD3E844}) (Version: 1.05.157 - Ubisoft)

Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft)

Torchlight (HKLM-x32\...\{4F64A46D-67F7-4497-AEA2-313D4305A5F6}) (Version: 1.0.0 - JoWooD)

Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)

UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)

UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden

Unity Web Player (HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS)

Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft)

VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)

Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.8.1 (HKLM\...\VulkanRT1.0.8.1) (Version: 1.0.8.1 - LunarG, Inc.)

Warface Launcher (Beta) (HKLM-x32\...\{28D1723C-31C4-4A83-9799-DFFB3739026D}) (Version: 1.0.0 - Crytek GmbH)

WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)

WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

Xfire (remove only) (HKLM-x32\...\Xfire) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-447048058-3512354665-2473454594-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\André\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)

CustomCLSID: HKU\S-1-5-21-447048058-3512354665-2473454594-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileCoAuth.exe (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {06D7A464-EF44-45D8-84D0-271723F24DE0} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {1134DC2D-A6A0-4857-8DFB-4E0F493CAD27} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)

Task: {209E117D-060D-4095-8226-DA5E1595625F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-05-11] (Microsoft Corporation)

Task: {26E83EB5-0985-4BE7-BE5E-A47972D7D075} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {2778F490-C82D-42C7-BD77-940CA83F03E8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {29A654A0-ECEF-430C-B9C6-D5DA8218C67A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {341B99C2-8FB9-4F21-8869-DFE149EFA999} - System32\Tasks\ParkControl => C:\Program Files\ParkControl\ParkControl.exe [2015-12-19] (Bitsum LLC)

Task: {3580C528-E0CC-4735-86E3-63A0B8BCC508} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)

Task: {36845F08-5763-4540-A234-3BD7B90DE7F8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {36B39AF8-A1F5-45D2-8D4F-EB27E08C54E3} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {49C98BDB-BD1D-44D9-96D6-A9FD5A0AA4AA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-04-06] (Hewlett-Packard)

Task: {4F62D898-94B2-44CA-967B-B256E3AA2E0F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-03-07] (Hewlett-Packard)

Task: {515A7EF6-E89A-4707-835F-F8036BCBB02A} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG

Task: {5842D560-FD1E-4C48-8FE4-4E908E3A4342} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {5C501871-B552-4961-BA3E-5523A8366733} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {60C66F2F-213B-4ED5-B256-181C19F42793} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {64CBC6CC-16C6-4E62-9BD4-34A147514232} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)

Task: {6A2657BF-8F02-410D-810E-39C37F40A9BA} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {6F39FF7F-B3BA-4B3A-A5AB-3A23DF5DAB64} - System32\Tasks\ScanToPCActivationApp.exe_{1848EEB4-045A-492D-97B5-A1ABDF8FFF51} => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {90507BF5-E1A6-42A0-A439-4B985CA6A4E2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {92B2AB27-9A52-4CB1-8134-B402BA47CF27} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {9D530CB6-040B-44AE-9475-D09A3FB7A7AC} - System32\Tasks\AdobeFlashPlayerUpdate => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {9DC3DA29-DD1B-43FF-AE81-EAAF2E7E2D03} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-16] (Adobe Systems Incorporated)

Task: {A5222A0D-D798-4B9B-AB9E-7AE2C8386DCC} - System32\Tasks\{4E94E5CB-7B80-4D4F-9653-5B045DBB0562} => pcalua.exe -a "C:\Users\André\Desktop\Slender\Slender - The Eight Pages.exe" -d C:\Users\André\Desktop\Slender

Task: {C00B675E-A0CB-4537-91C1-0C49FABDC62D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {C544F986-1B75-4321-B5A1-159607876F3C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {CE8DAAA5-D76A-4FA8-9C91-D49F86D10B9A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {D019B7C6-F960-47C3-90A7-9C8E4C03031F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)

Task: {D36339C6-3F6E-4807-AD00-0BB992F63485} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\windows\SysWOW64\FlashPlayerUpdateService.exe

Task: {D506C41B-B7C3-473F-B43A-792AF9162E0D} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe

Task: {D66487DC-8EB8-41B7-8AB1-DB26B7F97C86} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

Task: {DE24F91B-6F17-4300-A47A-8B20F054EB6B} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\HP Deskjet 3050A J611 series.exe_{ADEB0F8D-477A-423E-88C7-3805843D3C4B}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HP Deskjet 3050A J611 series.exeĖ-install -prfn HP Deskjet 3050A J611 series (Netzwerk) -ePCUrl hxxps:/h30495.www3.hp.com

Task: C:\WINDOWS\Tasks\HPCustPartic.exe_{490607ED-986D-40BF-BE2C-16BB55AA064D}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPCustPartic.exe

Task: C:\WINDOWS\Tasks\ScanToPCActivationApp.exe_{E224E030-DCCD-4312-8F4E-8929E6A12B66}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe

Task: C:\WINDOWS\Tasks\Toolbox.exe_{69C0F34C-8CBD-4512-B13B-F24BE0CC5553}.job => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\Toolbox.exe

Task: C:\WINDOWS\Tasks\XboxStatTask.job => C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-05-11 19:23 - 2016-04-27 14:18 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-03-18 23:56 - 2016-03-18 23:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-05-12 16:18 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2013-01-03 19:54 - 2015-03-26 21:23 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe

2016-03-18 22:37 - 2016-05-02 07:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-03-18 22:36 - 2016-05-02 07:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-03-18 22:37 - 2016-05-02 07:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-05-12 16:18 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-05-11 20:06 - 2016-05-11 20:06 - 00959176 _____ () C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\ClientTelemetry.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-05-12 16:18 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-05-12 16:18 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-05-12 16:17 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-05-12 16:18 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-05-12 16:18 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-03-11 22:49 - 2016-03-11 22:49 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-04-01 13:38 - 2016-05-02 07:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-18 22:37 - 2016-05-02 07:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-04-01 13:38 - 2016-05-02 07:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll

2014-11-23 10:58 - 2016-03-23 14:06 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-05-11 20:39 - 2016-05-11 20:40 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2016-03-18 22:36 - 2016-05-02 08:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2013-03-12 18:10 - 2016-04-29 22:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll

2014-05-23 14:15 - 2016-04-30 02:10 - 02549840 _____ () C:\Program Files (x86)\Steam\video.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-01-23 16:20 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-08-29 14:47 - 2016-02-09 01:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2013-02-02 18:37 - 2016-04-30 02:10 - 00829008 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2016-03-09 15:02 - 2016-02-18 00:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll

2016-05-11 20:06 - 2016-05-11 20:06 - 00679624 _____ () C:\Users\André\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\ClientTelemetry.dll

2013-02-02 18:37 - 2016-04-28 03:00 - 49825056 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2012-11-22 11:38 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2015-01-23 16:20 - 2015-09-25 01:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\André\Downloads\Wallpaper\wallhaven-156813.jpg

DNS Servers: 192.168.0.1 - 192.168.0.2

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AMD External Events Utility => 2

MSCONFIG\Services: Apple Mobile Device => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: Origin Client Service => 3

MSCONFIG\Services: WeGameClientService => 2

HKLM\...\StartupApproved\StartupFolder: => "Speedport W 101 WLAN Manager.lnk"

HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"

HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"

HKLM\...\StartupApproved\Run: => "XboxStat"

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "BingDesktop"

HKLM\...\StartupApproved\Run32: => "HP Software Update"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "BF2Hub Client"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Xfire.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\StartupFolder: => "Steam.lnk"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "SUPERAntiSpyware"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "GUDelayStartup"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\...\StartupApproved\Run: => "Spotify Web Helper"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{305A4E45-3FEB-4293-B381-B5077FD9A4ED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{58307D7D-485E-456D-8D40-11B231A2D5F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cosmic DJ\CosmicDJ.exe

FirewallRules: [{B9204EB4-20CE-4AA5-8A1A-9324E6806329}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{22E36B34-93CD-4B4F-A5FB-5AFFD7F9217C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe

FirewallRules: [{0EEDE53D-E7BD-4BFE-8190-8761E301FC43}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [{4B42444C-39EC-4DE6-93C4-F37658C012D4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe

FirewallRules: [UDP Query User{559A0FF3-0735-4B3A-A8DC-D372E4F2896F}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [TCP Query User{4C1C0507-D001-4114-820D-F8D2A26F0901}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [{7040C603-3913-4BA6-BD1E-E937BD819C14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [{4E5CBD26-E8EA-4812-9703-902E1871A0D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe

FirewallRules: [{7D629C6C-2852-4C13-AE7C-C6E7D0F14E6E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{E43876E3-8A49-45C9-A1BE-FD30D5F51304}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{34F5F4C6-599F-4D22-A403-1FEFEB04F774}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{9211B61F-6AB9-436E-AE60-FB5D52BFC6F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{61D4255A-0725-4A20-86E9-A34E748B4F71}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{D904EB1D-3CF6-4D18-ABAD-152EC199EABB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{2DADFF23-7A32-40C7-97D3-74EBF26FC353}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{B0ACEF2B-4DBF-4D2D-81F2-89919DADDAE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{3AF93217-33B9-474C-8F86-6DA2552DA48D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [{5B9E721E-7C91-4AFB-8D54-F23B323D8D38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe

FirewallRules: [UDP Query User{99098603-601D-4775-9C3F-BEC0C8D673D8}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [TCP Query User{F6A32B85-6372-45E2-92B3-0AFC0691F1B7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

FirewallRules: [{874A6590-5815-43EC-B566-7CBEB1912029}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{EC6C7D2A-4B98-43D4-A98D-A5F23E492F17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [{637479C3-5E89-4FAC-8365-DDD65B257ED8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe

FirewallRules: [UDP Query User{4765706F-B3BB-43A0-B242-0A13CE229922}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [TCP Query User{5CC79050-2FF6-4A33-8DA8-E4C465A2A3DE}C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\theculling\victory\binaries\win64\victory.exe

FirewallRules: [{AFFB53C2-13B6-4304-A294-3BB329BD7A32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{410F82CB-A332-4660-91D6-53EC5F42E57D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TheCulling\TheCulling_Launcher.exe

FirewallRules: [{262C47AA-404B-48BA-8D26-F495E5069386}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{F0065602-B604-471B-AF08-8447902B5DA3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{1274CD60-E8E4-469D-9A12-04443BFCBAF8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{4B96DCC9-61BA-4747-8A57-9B0DEC5D083A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{44F22EFC-FB2D-4E4D-B1A1-3A9C31E2D3A6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{B2D89EFE-0FB9-4756-9144-21CFA0AA27BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{55449DDA-7F51-4C61-8861-B3C700B4A81F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{BDCC194D-ABA9-4892-B891-FCC35B720DD7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{56C07A57-BFA5-470E-8B65-52E04CA6E40E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{569AB28B-79DA-4152-98C7-8FC358FC16A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{7A629A0A-1D85-462A-8131-C0F1A0FED8BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe

FirewallRules: [{2330A750-582C-4E3D-8E02-56F0FA5E1800}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [{8E73AB31-C8AD-4F78-AEBF-565629D44666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe

FirewallRules: [UDP Query User{FEBEFACE-4396-49C6-91E1-33AFCF378EB8}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [TCP Query User{6A11780A-C673-4C25-B63A-2AC4A906E120}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{FABC240F-274B-47AC-858F-438E14DB95F9}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe

FirewallRules: [{E25BCE61-2553-4378-B9C8-32AA3DE4414B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [{9522C61C-0FA5-42CF-99A6-8796BC8ABBB3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe

FirewallRules: [UDP Query User{2E6E8688-E1C8-47E6-B2D9-7E594F859EA7}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [TCP Query User{35496E53-0B61-408F-8762-039BB5C1035C}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe

FirewallRules: [{0464378F-CD97-4216-A966-760782823490}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{5A8CFE7B-899A-4490-BA84-3F58FA2E8F38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe

FirewallRules: [{11C55929-3DB5-4FFF-8D23-A6A63911510C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{57EA8011-8988-497E-84D0-F9502DB2A1CA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{2F46FAC5-39DA-48CB-87B7-2DB63DF9CC9B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{B3852398-F898-4F6F-A736-001671E9D853}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{371DDF5E-863C-4B04-AA36-9BCA8957ABAF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{68241CF8-3F67-4606-9CD6-9B44629D1FA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{8B7F0374-A4DB-4F25-96A9-11C334A778A5}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{009D5093-8B1A-47ED-B2D1-75DCD3A253AF}C:\users\andré\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andré\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{87D57B25-B389-4873-99F1-F1F4B56DB10E}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{B5EF835B-497F-41DE-BC00-7BF39F3DBAB2}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [UDP Query User{BE617A23-6191-4E1B-A1CE-EF5C38152015}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [TCP Query User{04AEA058-464E-45DC-9F12-93012201A387}C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\jre\bin\java.exe

FirewallRules: [UDP Query User{A24F1D35-3B16-4FC8-AE35-EFD7D74302B5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [TCP Query User{80A3FF00-1CE5-40FA-BD74-CDF7B1FEE7A5}C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe] => (Allow) C:\program files (x86)\ti education\ti-nspire computer link\ti-nspire computer link.exe

FirewallRules: [{AA00C280-76B2-4D38-A4EA-F40C474FE62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{07E757A0-BEA6-4D39-BA47-1322E5A4F972}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{03192198-3130-4974-96A8-59765F30ABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{F900103E-5B80-4ECD-88B4-7F921E7982DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{5601EF96-3EE6-4AC2-8E5C-9B3C70F1E055}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{04A68A81-678E-4E08-A891-118BF8A82A13}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{CCC81A88-F96B-482F-A763-63A8BC4FBABD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{10F8A69D-4A78-43DE-A010-A8D58C912584}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

FirewallRules: [{5EBD8610-3469-4A9A-B763-93442B6B1E9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [{3FB0EED4-4D83-4864-8256-1112E438528A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe

FirewallRules: [UDP Query User{4B650623-F185-4E8F-B32C-923681610894}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [TCP Query User{3FA714E6-27A8-4C83-A83D-3F14708C7522}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe

FirewallRules: [{55B707B7-0D91-4B83-BD64-3B43BC35E5C3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [{75D3D7EE-8634-44FC-9B6D-398DBD05BDDC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe

FirewallRules: [{B3852A97-3C8C-4718-9B64-A8BDCA0A2E5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{83BA189A-2359-4DF2-9B85-4243C11527B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{74E5C093-E8B3-43AF-B873-FF22E5D9C20D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{148BD9DE-CE7B-495B-808D-4493B12374BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [UDP Query User{73446A00-A12F-4119-8470-7F8545100C5C}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [TCP Query User{18EBDBB0-6F97-4DBD-9FE2-E95D002547EA}C:\program files (x86)\ea games\battlefield 2\bf2.exe] => (Allow) C:\program files (x86)\ea games\battlefield 2\bf2.exe

FirewallRules: [{D9D485A7-E593-4F69-8763-71B6B32FA889}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{D5E03025-EB0F-4A7C-BB33-A3F9DD115AE6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{44407D7A-EA04-4913-90A4-F6270C3E8934}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{82DD64BA-BE73-4A59-BC83-D0CBCAD11B33}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [UDP Query User{042AC962-6FD7-4955-A24A-518DF58804BB}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [TCP Query User{5F2D22DE-18CE-4B5B-A2A4-AE30C787FF0F}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [{0D170153-EA06-42AA-9A18-94CF56EC2C1D}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [{B0603A95-9371-4DDE-873B-3E9B50060C5E}] => (Allow) C:\Program Files (x86)\EA Games\Battlefield 2\BF2.exe

FirewallRules: [UDP Query User{8A83C40E-4BAC-4B5E-A74D-221CCD63CF3D}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{7366368D-2C3F-4C0C-94C9-79291994E5EF}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{F7147E30-BE04-4702-BB59-3CF913696D06}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{EE59E25E-E681-4F6D-AF72-AD2A1F391D43}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{863BA61A-4FEF-4D22-B6F7-2A6A445CD55D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [{4A0EF7F6-2123-422C-9B03-E67434EC229A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe

FirewallRules: [{080B0641-9913-418C-83AF-B418D6421F3E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [{6C8D7433-1032-4924-92EE-E231B2C60069}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe

FirewallRules: [UDP Query User{EDD83D34-D790-4F04-AF0B-12A09F8A5F6B}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{7A28D840-1BC8-4A6B-8A79-EFF25E28477E}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{35E64E04-DDCC-40A5-B7DF-DC924212030D}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [{2060FED0-2274-4EAA-BF88-879831BB9D71}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{E1FD84FD-A7D8-4832-9B25-FBFC9302E2EA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{CE1660CA-ECA5-44DE-A94C-25D5ADC5A300}] => (Allow) LPort=2869

FirewallRules: [{0B44211B-1D40-4E7E-B060-6CA1F81528A3}] => (Allow) LPort=1900

FirewallRules: [TCP Query User{843B521A-F575-49BB-A5E6-A8BAF3F39FDB}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [UDP Query User{1F14F8E7-EF0B-4C0D-A2DC-7D79E56FCD90}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [{F547011A-F4A2-4823-9514-BFBC0F04DF47}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [{84A117B9-6229-4B07-AA4C-592C006DAF17}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [TCP Query User{199F5DA8-537B-4802-A081-BCC0BDCA4D49}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [UDP Query User{615E09E1-58DF-4F2B-9001-EC72C28F1ED4}C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe] => (Allow) C:\program files (x86)\ubisoft\tom clancy's splinter cell chaos theory\system\splintercell3.exe

FirewallRules: [TCP Query User{ABC0EAEB-F6E3-42D6-A4AF-E4698720895E}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A73EB24B-5760-406C-92F6-01680BFD0E17}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [{0FEB2ABB-96A2-4F9B-B5DF-352080B000A0}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{8E386419-8F65-43C5-A842-65EC79A74C5E}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{47442B8F-1B8A-4BF4-98E7-5A4025AA9F33}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{CFC7DE7C-9FD1-46FC-86B0-78C26A9B7775}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{4EEC4502-D631-42C4-8990-017FBDE70B5A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{88C338FE-13BA-49E4-B938-296AEF29807B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{B9B504D2-0BED-44C8-87A1-B03F9A25CB3D}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{DC7BF070-51A4-41A4-B1FB-F05B12A05E32}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [{F7667282-18D2-4EEC-845E-3B3BCA6702EA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{2C72D711-F6FE-41A5-8E01-8BD6424A81C9}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{979C4E21-D9C4-49F4-BCE0-EF5DA3644EDE}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{3D45854F-3635-4D6A-ADF4-0EBEE2575081}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{854A33A6-B57B-49A4-BC0B-B447864978E7}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [TCP Query User{0A63AFDA-95CA-4F6C-8E66-D7A04EF5F6CA}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{2AD03E61-6CB6-4DB2-A353-217D91DEBB80}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [TCP Query User{BA0ECDB6-A448-4439-A0A6-374398724581}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [UDP Query User{11A23F99-555C-444F-857D-496287B9A48F}G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe] => (Allow) G:\photoshop elements 7.0\adobephotoshopelementsmediaserver.exe

FirewallRules: [TCP Query User{7061FBA7-108A-4A04-A3F1-0C3A4259C982}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{7A239781-B79A-4B27-92BB-D85A772CDE98}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [{4A5D0F96-864C-488C-A3DE-31A996CDA638}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{3D8FCAA0-AF8A-4080-B76E-91B00EEF2A12}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{B320A94D-2C0A-40BC-A57E-B8FF09548745}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{84D5A424-B0E1-48B8-99F7-56DB8A7D831D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{866386DB-549E-451B-8B08-324399D57293}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{E167F28F-3CDB-4E9C-BC93-54BA1A2C3C01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [TCP Query User{2DED59E3-BCD4-4AD1-A751-69C0D993C9C0}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [UDP Query User{1AF00546-D969-4B95-BCE1-20AD60109548}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe

FirewallRules: [{552360C1-3E4D-4478-B81A-743E57C60ADE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [{F7029719-F975-4165-B9DE-4B50E21FBD96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spelunky\Spelunky.exe

FirewallRules: [TCP Query User{5B108050-331D-4078-91F7-333C2FD058F0}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{20BC6940-EC8A-4D84-ADA8-0CAC1583C908}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{89D923D0-52AD-45D3-AB79-2B2FCFA7EEC9}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{E211D57C-F8D2-4000-8717-F6EB9BFED9C1}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{6E596561-2567-4AA7-8292-2F13D08053FD}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [{CC9108CA-CAB2-488E-8173-A09E6DBEFB19}] => (Allow) C:\Program Files (x86)\7DaysToDie-Alpha\7DaysToDie.exe

FirewallRules: [TCP Query User{FCADCA24-8865-4D9D-A358-492C0B930FD7}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [UDP Query User{816344A6-B7AA-436A-BAF9-ED24DFB232A6}C:\gog games\arcanum\arcanum.exe] => (Block) C:\gog games\arcanum\arcanum.exe

FirewallRules: [{67C1EB95-DE28-4F2B-9058-7B3A2C72D823}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{81FA855D-D76B-4447-984C-FD3599D90623}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{BE7C4B8C-D22C-4D39-8769-D7D17B52C432}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\DeviceSetup.exe

FirewallRules: [{4E37412E-E309-4DA4-84C7-61826D930253}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe

FirewallRules: [{B04BA630-71E3-48BB-A53D-43E9B3AD9A5F}] => (Allow) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [{A878638D-E967-4491-BF24-9D823CEE97A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [{D5C94B11-2437-48C8-A43B-1EBADF3BE765}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe

FirewallRules: [TCP Query User{CA39CCB2-445B-4394-977C-B740672B0350}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [UDP Query User{4368F7BC-2A7C-4AF9-AB66-A7C6C67449E8}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe

FirewallRules: [TCP Query User{434FF7C0-9231-4B8F-98BD-4272CB9EA40F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{C7B0AA1C-B270-46B5-A6DD-E789B6CF0316}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [{B76F0C57-6BE2-41BA-8FDC-D600A548733A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{4C19DB87-1819-4DEC-A423-C5D30DED153C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{F4AD3048-6EC2-4C89-9AE4-3079E222A515}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{16766F7A-84A3-47D2-BB13-C739A79A6BC4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{3B2F061E-9DEE-4A60-BB66-553D949A1CE8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{4CCB3275-446A-4A5E-984B-E661A5906CE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{DA5F7BAC-034D-4514-AB1E-3A8F49EC98FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{E54F4129-E34D-4242-B28A-3934E7456BA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{1A3EF871-27E4-4CBC-B74B-B2383F0DFFF9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{937343C7-994B-47F9-A316-66587B212F11}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe

FirewallRules: [{DC6B5AFF-687B-42F4-B773-5B4C844B8A0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{10B45A3C-510B-49D0-B8E9-18C5B443BB7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [TCP Query User{510AED7B-4C10-43DD-9E41-C64994BFEC9E}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [UDP Query User{6484B4C8-1523-4FEA-896C-6D9D95068AA8}C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe] => (Allow) C:\program files (x86)\ubisoft\splinter cell pandora tomorrow\pandora.exe

FirewallRules: [TCP Query User{04AD78F5-1C42-4AC3-8B08-0F992D282CA5}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [UDP Query User{60F2F817-AD57-4421-9452-9459338C4CB0}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe

FirewallRules: [{D8D25627-2D6B-416C-A1B7-F15DB81C4CC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{74FD4306-F4CE-4F02-AA0A-66FABFAF2526}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe

FirewallRules: [{A05353E0-15C5-4636-91E5-3EC3DB7A9298}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{AE67764D-BD85-405D-909A-B40D6A2D364B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{61338F15-C415-4289-88E5-E4D1456EF082}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{AB62C390-516F-4D0D-9FA3-691F9B6D52D2}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{AF7CEDE2-2D7E-4353-8884-1C2491D82A4C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{2CA630FB-839D-40DB-9F36-228B7F224361}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{D0268C2D-602B-4546-BA83-BB6BABE79EDF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{D4C2095B-7F89-4922-B8C4-B8827F84A2DB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{3887276F-6885-4E22-9F4B-3ABC201D6449}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{31DF9A60-1465-4A7A-B93D-7EFBCDCFFCF2}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{2F8C6559-20EB-4C1C-A37B-B5B2985E543D}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{19FCCC1D-B026-4BE5-9F5E-A60048284120}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{2673C359-B53B-40E4-9129-0E366B225601}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{F1B9229F-40C8-4BF7-8D09-07764066B3BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporeBin\SporeApp.exe

FirewallRules: [{22118AC4-2C6C-4A21-98E3-22CFE6EF30C1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{355A24CE-660C-4E0D-B3CF-5F9A3A64C921}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\runme.exe

FirewallRules: [{654C398B-5DF4-4B24-B2E4-377168A393CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{D35C7CB8-288E-4C90-B301-D96FD6B4F1C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spore\SporebinEP1\SporeApp.exe

FirewallRules: [{77A50C45-2191-4923-814A-6E2BA8B0A02E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{E3578200-F99C-4118-8086-3D55D018DEBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe

FirewallRules: [{3ECB7973-9619-405E-A6BE-1388AE65C0B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{14ABDB4B-012F-4764-A146-87C57D507349}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe

FirewallRules: [{6060FB65-6E8E-42FF-B1B8-775DECDC7404}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{0344D2C1-5B07-4B6F-9100-DC8397B20E52}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shovel Knight\ShovelKnight.exe

FirewallRules: [{9C5C6319-4BD7-4958-AF85-0390C636FE26}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{BDB3192D-E7E9-413A-9396-70B3873A65C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{EA882129-9F6E-47F3-B8A1-B714FAC38BB0}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{0B154B0F-E8BF-4E10-9AFB-602ACE45A389}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe

FirewallRules: [{03DEC87D-CCA7-47CD-9190-805E58AD02C6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{FC0B2104-7D49-442C-97B7-677F51721FFA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{31EE1A19-89CE-40CC-9182-EF6F2780E78D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{557AFC36-E381-4CA4-AEE1-AC9E8DABCAF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe

FirewallRules: [{FE4BB57F-B9C3-4B90-9532-3E31FAD1EC69}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{E1EB2855-1798-4EDE-8B3B-82F5861378C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe

FirewallRules: [{06EA1C1B-FFA2-492D-8A33-9B57E002C990}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [{A3195EE6-31BB-4692-B88C-0E8C843A9BF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe

FirewallRules: [TCP Query User{D4F0CF27-9B16-40CA-B125-178FA527F955}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [UDP Query User{C90CE360-557C-4657-B704-20F529B34C8E}C:\songan's ttt server - kopie\srcds.exe] => (Allow) C:\songan's ttt server - kopie\srcds.exe

FirewallRules: [{40D1C4D5-5783-45CE-B50D-2EEC03C7C17A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [{525FF56F-BD8E-4FF1-AC06-78A70ED5832D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SavantAscent\Savant_Ascent.exe

FirewallRules: [{9DE8F934-ADAD-4318-880A-BA8C00675792}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{2F81C9A0-7BBE-4D71-8051-29AB84EE6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{FE925693-9911-4087-9D79-A7485643019B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{01D68D38-AB8D-4B9E-ABC3-8BE5A9B7D066}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe

FirewallRules: [{CEC15E66-D055-443B-B5B2-F7C5043D769C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\HeroSiege\bin\Hero_Siege.exe

FirewallRules: [{26D1B780-2E71-482C-838F-2E2E5C545045}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\HeroSiege\bin\Hero_Siege.exe

FirewallRules: [{3A4AC5FD-B683-4C67-95E4-67770F6E6A71}] => (Allow) LPort=53000

FirewallRules: [{58921B76-3D7E-4F79-A8B4-3FB1C5F79DF2}] => (Allow) LPort=52000
 

==================== Wiederherstellungspunkte =========================
 

13-05-2016 16:26:49 JRT Pre-Junkware Removal

13-05-2016 16:29:36 JRT Pre-Junkware Removal
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/16/2016 09:32:00 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
 

Error: (05/16/2016 09:31:04 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
 

Error: (05/16/2016 03:01:35 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
 

Error: (05/16/2016 03:00:56 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
 

Error: (05/16/2016 03:00:53 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
 

Error: (05/16/2016 03:00:53 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
 

Error: (05/16/2016 03:00:50 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
 

Error: (05/16/2016 03:07:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: APSDaemon.exe, Version: 2.4.6.6, Zeitstempel: 0x56ecad12

Name des fehlerhaften Moduls: APSDaemon_main.dll, Version: 2.4.6.6, Zeitstempel: 0x56ecae1a

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000029cd

ID des fehlerhaften Prozesses: 0x4b20

Startzeit der fehlerhaften Anwendung: 0xAPSDaemon.exe0

Pfad der fehlerhaften Anwendung: APSDaemon.exe1

Pfad des fehlerhaften Moduls: APSDaemon.exe2

Berichtskennung: APSDaemon.exe3

Vollständiger Name des fehlerhaften Pakets: APSDaemon.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: APSDaemon.exe5
 

Error: (05/16/2016 12:30:20 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel: 0x57164c47

Name des fehlerhaften Moduls: client.dll, Version: 1.0.0.1, Zeitstempel: 0x571c3a2b

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000ef44a

ID des fehlerhaften Prozesses: 0x164c

Startzeit der fehlerhaften Anwendung: 0xhl2.exe0

Pfad der fehlerhaften Anwendung: hl2.exe1

Pfad des fehlerhaften Moduls: hl2.exe2

Berichtskennung: hl2.exe3

Vollständiger Name des fehlerhaften Pakets: hl2.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: hl2.exe5
 

Error: (05/15/2016 02:42:36 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756

Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.103, Zeitstempel: 0x56a849ab

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000067e3c

ID des fehlerhaften Prozesses: 0x30c

Startzeit der fehlerhaften Anwendung: 0xdwm.exe0

Pfad der fehlerhaften Anwendung: dwm.exe1

Pfad des fehlerhaften Moduls: dwm.exe2

Berichtskennung: dwm.exe3

Vollständiger Name des fehlerhaften Pakets: dwm.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: dwm.exe5
 
 

Systemfehler:

=============

Error: (05/16/2016 07:52:22 PM) (Source: DCOM) (EventID: 10016) (User: André-PC)

Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}André-PCAndréS-1-5-21-447048058-3512354665-2473454594-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewyS-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795
 

Error: (05/16/2016 05:55:09 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}
 

Error: (05/16/2016 04:55:32 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}
 

Error: (05/16/2016 03:02:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/16/2016 03:02:50 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\ANDR~1\AppData\Local\Temp\ehdrv.sys
 

Error: (05/16/2016 03:02:49 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\ANDR~1\AppData\Local\Temp\ehdrv.sys
 

Error: (05/16/2016 03:02:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/16/2016 03:02:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/16/2016 03:02:49 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\ANDR~1\AppData\Local\Temp\ehdrv.sys
 

Error: (05/16/2016 03:01:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 
 

CodeIntegrity:

===================================

  Date: 2016-05-16 03:07:46.014

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-15 14:30:10.777

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-12 17:16:52.931

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-12 16:24:34.033

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:48:00.228

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:44:44.663

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-11 19:21:50.610

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz

Prozentuale Nutzung des RAM: 41%

Installierter physikalischer RAM: 8147.35 MB

Verfügbarer physikalischer RAM: 4777.92 MB

Summe virtueller Speicher: 10067.35 MB

Verfügbarer virtueller Speicher: 6582.88 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:918.61 GB) (Free:75.04 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive d: (Recovery Image) (Fixed) (Total:10.98 GB) (Free:1.33 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive e: (NVCDV243) (CDROM) (Total:1.18 GB) (Free:0 GB) CDFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9FE15288)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

M-K-D-B

17.05.2016 09:31

Servus,

Zitat:

CHIP-Installer.exe

Bitte keinen Chip-Installer mehr verwenden! Bitte lesen: CHIP-Installer – was ist das?

Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

CloseProcesses:

DeleteKey: HKLM\SYSTEM\ControlSet001\Services\EventLog\Application\WebCakeUpdaterService

DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WebCakeUpdaterService

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975}

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{98889811-442D-49DD-99D7-DC866BE87DBC}

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{AE07101B-46D4-4A98-AF68-0333EA26E113}

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome

EmptyTemp:

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird!

Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

	Emsisoft	Microsoft Security Essentials	ESET
	http://filepony.de/icon/emsisoft_anti_malware.png	http://filepony.de/icon/microsoft_se...essentials.png	http://deeprybka.trojaner-board.de/eset/esetmd.png

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/adblock_firefox.pngAdblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
http://filepony.de/icon/noscript.png NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:

Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Chronos5896

17.05.2016 13:09

Vielen Dank für deine Hilfe! Ich denke, dass keine Fragen mehr aufkommen sollten. Wenn was nicht stimmen sollte, dann kann ich dich nochmal fragen, oder? Ach und vielen Dank für die Randinfos, wie zum Beispiel die Info mit dem Chip-Installer! Die werde ich meinen Freunden weitergeben.

Hier der Fixlog

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:16-05-2016

durchgeführt von André (2016-05-17 13:53:38) Run:5

Gestartet von C:\Users\André\Desktop

Geladene Profile: André (Verfügbare Profile: André)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

start

CloseProcesses:

DeleteKey: HKLM\SYSTEM\ControlSet001\Services\EventLog\Application\WebCakeUpdaterService

DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WebCakeUpdaterService

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975}

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{98889811-442D-49DD-99D7-DC866BE87DBC}

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{AE07101B-46D4-4A98-AF68-0333EA26E113}

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow

DeleteKey: HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome

EmptyTemp:

end

*****************
 

Prozess erfolgreich geschlossen.

HKLM\SYSTEM\ControlSet001\Services\EventLog\Application\WebCakeUpdaterService => Schlüssel erfolgreich entfernt

HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WebCakeUpdaterService => Schlüssel nicht gefunden. 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} => Schlüssel nicht gefunden. 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{98889811-442D-49DD-99D7-DC866BE87DBC} => Schlüssel nicht gefunden. 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{AE07101B-46D4-4A98-AF68-0333EA26E113} => Schlüssel nicht gefunden. 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow => Schlüssel nicht gefunden. 

HKU\S-1-5-21-447048058-3512354665-2473454594-1001\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome => Schlüssel nicht gefunden. 

EmptyTemp: => 404.6 MB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 13:53:43 ====

Alle Zeitangaben in WEZ +1. Es ist jetzt 20:13 Uhr.

Seite 2 von 3

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131